Which labs do I have to do?

To complete the BSCP certification, it is not necessary to do all the PortSwigger labs; it is enough to do the labs that are relevant for the exam. I recommend repeating the labs twice: once while creating a write-up and another time while taking notes for the exam.

However, the goal of this certification should be to learn and improve in web pentesting, so I recommend doing all the labs.

Once you complete all these labs, the recommended next step is to do the mystery labs. There is no specific number to complete, just continue until you feel comfortable solving them.

FOOTHOLD - STAGE 1

Content Discovery

• Info leak in version control history

DOM-Based XSS

• DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
• DOM XSS in document.write sink using source location.search inside a select element
• DOM XSS using web messages and JSON.parse
• DOM XSS using web messages and a JavaScript URL
• DOM XSS using web messages