Research Academy
My account Customers About Blog Careers Legal Contact Resellers
Burp Suite Certified

New topic: Web cache deception

Learn how to discover and exploit web cache deception vulnerabilities using new powerful techniques that exploit RFC ambiguities, bypassing the limitations of web cache deception attacks you may already be familiar with. Content and labs based on Gotta cache em all: bending the rules of web cache exploitation, first presented by PortSwigger Research at Black Hat USA 2024.

Learn more

Welcome!

Learn to secure the web one step at a time, with our practical, interactive learning materials. Covering the latest research, and completely free.

Your learning progress

Ready for your next challenge?

Jump straight into the latest topic releases, or check out our full topics list.

Web cache deception

Visit topic

Web LLM attacks

Visit topic

API testing

Visit topic

NoSQL injection

Visit topic
Get started with your first Academy topic

Learning paths

Guided learning paths through the Web Security Academy

Can we help you get started?

Let us help you get the most out of your Academy experience: we've broken down how it all works, and created a recommended list of topics for you to start with.

Getting started guide
Web Academy getting started hero

Want the latest from the Web Security Academy?

Follow us on Twitter for new topic releases, and to get involved with our wider community.

Follow us on twitter

Learning about web security @WebSecAcademy and don't know how I made it this long in the web design world without getting into this. Now I am hooked. Can't stop playing around in their labs. Just spent an entire long weekend in front of the laptop #websec #100DaysOfCode

@CodeWithFrida

An overview of all topics

Read more

Hall of Fame

Read more

Getting started guide

Read more