개요

Burp Suite를 모델 컨텍스트 프로토콜(MCP)을 사용해 AI 클라이언트와 통합하세요.

프로토콜에 대한 자세한 정보는 다음을 방문 modelcontextprotocol.io

특징

• Burp Suite를 MCP를 통해 AI 클라이언트와 연결
• Claude 데스크톱용 자동 설치
• 패키지화된 Stdio MCP 프록시 서버 제공

사용

• Burp Suite에 확장 프로그램 설치
• 확장 설정에서 Burp MCP 서버를 구성
• MCP 클라이언트를 Burp SSE MCP 서버 또는 Stdio 프록시를 사용하도록 설정하세요
• 클라이언트를 통해 Burp와 상호작용하세요!

설치

전제 조건

확장 및 설치 전에 다음 전제 조건을 충족하는지 확인하세요:

1. Java: Java는 시스템의 PATH에 설치되어 있고 사용 가능해야 합니다. 터미널에서 java --version를 실행하여 이를 확인할 수 있습니다.
2. jar 명령어: jar 명령어는 실행 가능해야 하며, 시스템의 PATH에서 사용 가능해야 합니다. 터미널에서 jar --version를 실행하여 이를 확인할 수 있습니다. 확장 프로그램을 구축하고 설치할 때 이 명령어가 필요합니다.

확장 공사

1. 저장소 복제: MCP 서버 확장 프로그램의 소스 코드를 얻으세요.

Burp Suite MCP Server Extension

Overview

Integrate Burp Suite with AI Clients using the Model Context Protocol (MCP).

For more information about the protocol visit: modelcontextprotocol.io

Features

• Connect Burp Suite to AI clients through MCP
• Automatic installation for Claude Desktop
• Comes with packaged Stdio MCP proxy server

Usage

• Install the extension in Burp Suite
• Configure your Burp MCP server in the extension settings
• Configure your MCP client to use the Burp SSE MCP server or stdio proxy
• Interact with Burp through your client!

Installation

Prerequisites

Ensure that the following prerequisites are met before building and installing the extension:

1. Java: Java must be installed and available in your system’s PATH. You can verify this by running java --version in your terminal.
2. jar Command: The jar command must be executable and available in your system’s PATH. You can verify this by running jar --version in your terminal. This is required for building and installing the extension.

Building the Extension

1. Clone the Repository: Obtain the source code for the MCP Server Extension.

   git clone https://github.com/PortSwigger/mcp-server.git
   

2. Navigate to the Project Directory: Move into the project’s root directory.

   cd mcp-server
   

3. Build the JAR File: Use Gradle to build the extension.

   ./gradlew embedProxyJar
   

   This command compiles the source code and packages it into a JAR file located in build/libs/burp-mcp-all.jar.

Loading the Extension into Burp Suite

1. Open Burp Suite: Launch your Burp Suite application.
2. Access the Extensions Tab: Navigate to the Extensions tab.
3. Add the Extension:
   • Click on Add.
   • Set Extension Type to Java.
   • Click Select file ... and choose the JAR file built in the previous step.
   • Click Next to load the extension.

Upon successful loading, the MCP Server Extension will be active within Burp Suite.

Configuration

Configuring the Extension

Configuration for the extension is done through the Burp Suite UI in the MCP tab.

• Toggle the MCP Server: The Enabled checkbox controls whether the MCP server is active.
• Enable config editing: The Enable tools that can edit your config checkbox allows the MCP server to expose tools which can edit Burp configuration files.
• Advanced options: You can configure the port and host for the MCP server. By default, it listens on http://127.0.0.1:9876.

Claude Desktop Client

To fully utilize the MCP Server Extension with Claude, you need to configure your Claude client settings appropriately. The extension has an installer which will automatically configure the client settings for you.

1. Currently, Claude Desktop only support STDIO MCP Servers for the service it needs.