Course 1 - BurpSuite Bug Bounty Web Hacking from Scratch | Episode 1: Installing Burp Suite, OWASP BWA, and Bee-Box (Bwapp) episode artwork

EPISODE · Nov 11, 2025 · 14 MIN

Course 1 - BurpSuite Bug Bounty Web Hacking from Scratch | Episode 1: Installing Burp Suite, OWASP BWA, and Bee-Box (Bwapp)

from CyberCode Academy · host CyberCode Academy

In this lesson, you’ll learn about:Setting up a web security testing lab to practice web application security, pentesting, and exploiting common web vulnerabilities.Burp Suite — installation & overview: Java requirement (Oracle Java), download from portswigger.net, available editions: Community (free, limited/no scanners/payloads) and Professional (paid, includes passive/active scanners and built-in payloads), and installation options (Windows executables or cross-platform JAR).OWASP Broken Web Applications (BWA): purpose as a vulnerable VM for learning and testing; requires VirtualBox and is imported as a ready OS image (no new VM creation); includes apps like WebGoat and Mutillidae; default VM credentials (root / OWSP DWA).Bee-Box (Bwapp) VM: Bee-Box ships with bwapp (deliberately insecure web app) for hands-on practice; covers OWASP Top 10 flaws and other common issues; practice modes (low/medium/high); downloaded from SourceForge and run in virtualization software (e.g., VMware); access via VM IP and default bwapp creds (B / bug).Practical workflow: use Burp Suite as the main inspection/proxy tool against the vulnerable VMs (BWA, Bee-Box) to practice discovery, exploitation, and remediation techniques.Learning goal / metaphor: this episode provides your core toolkit — the primary assessment tool (Burp Suite) and two practice targets (BWA and Bee-Box) for safe, repeatable skill development.You can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cybercode_academy

In this lesson, you’ll learn about:Setting up a web security testing lab to practice web application security, pentesting, and exploiting common web vulnerabilities.Burp Suite — installation & overview: Java requirement (Oracle Java), download from portswigger.net, available editions: Community (free, limited/no scanners/payloads) and Professional (paid, includes passive/active scanners and built-in payloads), and installation options (Windows executables or cross-platform JAR).OWASP Broken Web Applications (BWA): purpose as a vulnerable VM for learning and testing; requires VirtualBox and is imported as a ready OS image (no new VM creation); includes apps like WebGoat and Mutillidae; default VM credentials (root / OWSP DWA).Bee-Box (Bwapp) VM: Bee-Box ships with bwapp (deliberately insecure web app) for hands-on practice; covers OWASP Top 10 flaws and other common issues; practice modes (low/medium/high); downloaded from SourceForge and run in virtualization software (e.g., VMware); access via VM IP and default bwapp creds (B / bug).Practical workflow: use Burp Suite as the main inspection/proxy tool against the vulnerable VMs (BWA, Bee-Box) to practice discovery, exploitation, and remediation techniques.Learning goal / metaphor: this episode provides your core toolkit — the primary assessment tool (Burp Suite) and two practice targets (BWA and Bee-Box) for safe, repeatable skill development.You can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cybercode_academy

NOW PLAYING

Course 1 - BurpSuite Bug Bounty Web Hacking from Scratch | Episode 1: Installing Burp Suite, OWASP BWA, and Bee-Box (Bwapp)

0:00 14:20

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Lead with Faith: Empowering the Next Generation Jermaine Whiteside The Empowering Future Leaders Podcast – Presented by Anointed Connect Academy and hosted by Jermaine E. Whiteside, Doctoral Candidate in Christian Education, this podcast is your gateway to faith-driven leadership, lifelong learning, and real-world success strategies. Each episode blends inspiration with action, spotlighting career pathways, professional exam preparation, and innovative educational resources designed to equip the next generation of leaders.With candid conversations, expert insights, and transformative stories from students, educators, and industry leaders, we address the challenges facing at-risk and underserved communities while providing tangible tools to overcome them. Rooted in Christian values and a commitment to generational impact, this podcast empowers students, parents, and professionals to break barriers, build skills, and boldly pursue their God-given purpose. Reconnect Radio Tara Kemp, PhD Reconnect Radio is a show for mindful women seeking a more aligned life. Hosted by leading mental health expert, researcher, and coach Tara Kemp, PhD - each episode brings the latest evidence-based tools, practical tips, and personal stories to support you in building a healthy relationship with food, your body, and yourself. If you’re ready to do the inner work that will lead you to thrive in your most authentic and aligned life, hit the follow button and get ready to experience true healing and transformation.Follow Tara on Instagram @tarakemp_ : https://www.instagram.com/tarakemp_Join Reconnect’s FREE Private Facebook Community for Plant-based Women: https://www.facebook.com/groups/reconnectplantbasedwomenSign up for Reconnect Academy: https://www.reconnectcollective.com/reconnect-academyLearn about other Reconnect Collective programs: https://www.reconnectcollective.com The Injury Prevention Academy Podcast DORN Companies Welcome to The Injury Prevention Academy Podcast with DORN!Tune in for your ultimate source of cutting-edge insights on workplace injury prevention, safety, ergonomics and wellness. Hosted by DORN and Cheryl Roy, this podcast is your go-to destination for staying informed about the latest news, trends, and data in the realm of employee well-being and workplace safety.Join us as we bring you expert interviews and thought-provoking discussions with leading voices in the field. Our goal? Empowering you to create safer, healthier work environments for your valued employees.🌟 Key Highlights 🌟🔍 Stay Updated: Get the freshest news and data surrounding workplace injury prevention, ergonomics and safety.🧠 Expert Insights: Discover valuable insights from experts covering pain management, injury prevention, safety programs and technology.🤝 Supportive Strategies: Gain actionable strategies to prioritize the safety and well-being of your employees.Whether you're a business owner, HR prof Fearless Podcasting Academy | Unlock Your Voice and Audience Dr. Stephanie Dean | Podcasting Strategist Your voice has the power to inspire, impact, and ignite change—but only if people hear it. Join Dr. Stephanie Dean at Fearless Podcasting Academy, where creators and entrepreneurs learn podcasting strategies to amplify their voices and build podcasts that demand attention. Here, we don't just talk about podcasting. We talk about bold storytelling, creative innovation, and the courage to show up unapologetically. Whether you're launching your first episode or leveling up your platform, you'll get proven strategies, expert insights, and the confidence to make your message matter. Because your story isn't just worth telling—it's worth hearing. Hit subscribe and step into your fearless voice.

Frequently Asked Questions

How long is this episode of CyberCode Academy?

This episode is 14 minutes long.

When was this CyberCode Academy episode published?

This episode was published on November 11, 2025.

What is this episode about?

In this lesson, you’ll learn about:Setting up a web security testing lab to practice web application security, pentesting, and exploiting common web vulnerabilities.Burp Suite — installation & overview: Java requirement (Oracle Java), download from...

Can I download this CyberCode Academy episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!