> For the complete documentation index, see [llms.txt](https://books.spartan-cybersec.com/web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://books.spartan-cybersec.com/web/la-biblia-del-hacking-en-web/aprende-hacking-web-con-los-laboratorios-de-portswigger.md).

# Aprende Hacking Web con los laboratorios de PortSwigger

Bienvenido al e-book "Burp Suite Certified Practitioner - Ejercicios Resueltos". Este recurso está diseñado para ayudarte a dominar los conceptos y técnicas necesarias para pasar la certificación de Burp Suite, especializándote en hacking web. Aquí encontrarás ejercicios resueltos, comandos, peticiones, y videos instructivos que te guiarán paso a paso en cada tema.

{% embed url="<https://books.spartan-cybersec.com/cppj/appweb-for-juniors/porque-deberia-aprender-hacking-web>" %}

## <mark style="color:red;">¿Qué es un Burp Suite Certified Practitioner?</mark>

<figure><img src="/files/vp6rXY5F8GVF09kFiRSM" alt=""><figcaption></figcaption></figure>

El Burp Suite Certified Practitioner (BSCP) es una certificación oficial para profesionales de seguridad web, creada por los desarrolladores de Burp Suite. Convertirse en un Burp Suite Certified Practitioner demuestra un conocimiento profundo de las vulnerabilidades de seguridad web, la mentalidad adecuada para explotarlas y, por supuesto, las habilidades necesarias en Burp Suite para llevar a cabo estas tareas.

## <mark style="color:red;">Contenidos y Temáticas de la Certificación</mark>

La certificación BSCP cubre una amplia gama de temas esenciales para la seguridad web, incluyendo:

{% content-ref url="/pages/QnYiBeTA6xvoPGoj5isn" %}
[SQL Injection](/web/sql-injection/sql-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/HJbA9YPvU3vPxp7Ud04M" %}
[Cross Site Scripting](/web/cross-site-scripting/xss.md)
{% endcontent-ref %}

{% content-ref url="/pages/dvcl7ecMKAaKwsTckFSF" %}
[ClickJacking](/web/clickjacking/clickjacking.md)
{% endcontent-ref %}

{% content-ref url="/pages/6dBGulj73vwPfx02mKDP" %}
[Access control vulnerabilities](/web/access-control-vulnerabilities/control-de-acceso.md)
{% endcontent-ref %}

{% content-ref url="/pages/H1xChjiL5MTfjvGWtKAw" %}
[Path traversal](/web/path-traversal/path-traversal.md)
{% endcontent-ref %}

{% content-ref url="/pages/XUlDrhbtSNSry4QYyNvE" %}
[XML external entity (XXE) injection](/web/xml-external-entity-xxe-injection/xml-external-entity.md)
{% endcontent-ref %}

{% content-ref url="/pages/ylCtT91X90FYoGWZm9WW" %}
[JWT](/web/jwt/jwt.md)
{% endcontent-ref %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://books.spartan-cybersec.com/web/la-biblia-del-hacking-en-web/aprende-hacking-web-con-los-laboratorios-de-portswigger.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.