# Burp Suite Fundamentals

> Master the industry-standard web proxy. Learn to intercept, manipulate, and automate web traffic to uncover hidden application vulnerabilities.

Canonical: https://codelivly.com/rooms/burp-suite-fundamentals
Last updated: 2026-07-13

| | |
|---|---|
| Level | Beginner |
| Category | Cybersecurity |
| Lessons | 7 |
| Estimated time | 30 min |
| XP | 200 |

Burp Suite is the undisputed king of web application penetration testing. Amateurs use it as a simple "proxy" to click through a website and maybe change a single parameter. Professionals treat Burp Suite as a dynamic, programmable web manipulation engine.

They understand the anatomy of HTTP requests, leverage Repeater for surgical payload delivery, use Intruder for automated fuzzing, and chain extensions to bypass complex authentication and logic flaws.

In this module, we will transition from passive browsing to active web exploitation. You will master the core Burp Suite tools, decode complex web architectures, and learn how to manipulate every byte of an HTTP request to break application logic.

## Lessons

1. What is Burp Suite & Why Pentesters Use It (30 min)
2. Proxy Setup (30 min)
3. Intercept & Repeater (30 min)
4. Burp Intruder (30 min)
5. Target & Scope (30 min)
6. Useful Extensions from the BApp Store (30 min)
7. Guided Lab: Full Web App Assessment Workflow in Burp Suite (30 min)

## Related

- [Learning path: Exploitation Fundamentals](https://codelivly.com/learning-paths/exploitation-fundamentals)
- [All rooms](https://codelivly.com/rooms)
