Stage 3 - Find a way to read the file at /home/carlos/secret Stage 2 - Escalate privileges to the administrator account. Stage 1 - Get access to a low privileged user account. These vulnerabilities need to be exploited in order as each of the three stages gives you access to more of the application.

The exam consists of two applications that have three vulnerabilities each that need identified and exploited. The typical price for this is $99 dollars, however, I purchased several attempts around Black Friday when they had it for $9 dollars. I don't personally get a lot out of the active scanning and use intruder in a very limited way that could be reproduced with script, so I wouldn't pick it up for any of that, but the functions mentioned offer enough benefit that if I would recommend them to a learner who could afford the pro price tag.The following are my thoughts on the fairly recently released Burp Suite Certified Practitioner exam and some tips if you plan on taking it. I also think the ability to save and restore states would be worthwhile for a learner, allowing you to spread the revision of your interaction with an application over a number of days, or return to a saved state in the future to look at it again to apply your new learning. The search within the free version only allows text search within individual requests/responses. This function allowing free text search over all requests/responses is invaluable to me. I can't live without the ability to filter my site tree or proxy history by a search term. This would be valuable if you're still learning about these issues, although the resources likely exist elsewhere as well. Scanner contains a detailed list of the vulnerabilities it can identify, what they are as well as links to additional resources on each of them. Some things I would recommend from the pro version: I think the decision whether to shell out for pro depends on how much impact that high price tag has on you.

Burpsuite pro cost