BurpMCP는 Burp Suite extension that augments application security testers, 취약성 연구원, 현대 AI를 가진 버그 현상 사냥꾼입니다. 매일, 큰 언어 모델은 더 큰 컨텍스트 창을 얻을, 빠른 응답 시간, 및 향상된 지식과 이유 기술. BurpMCP는 HTTP 기반 애플리케이션을 테스트하는 동안 이러한 기능을 활용할 수 있게 해 줍니다. super-intelligent sidekick을 제공하여 무해한 공격 표면을 탐색하고 복잡한 취약점을 추적할 수 있습니다.

BurpMCP는 Claude Desktop, Cursor 등과 같은 모델 Context Protocol (MCP) 클라이언트와 Burp Suite를 통합함으로써 LLM의 도움으로 수동 응용 보안 테스트를 강화하는 데 중점을 둡니다. 그래서 모델의 작업의 전체 제어 및 가시성을 대신하여 AI를 수행 할 수 있습니다.

특징:

• :notebook: MCP 클라이언트의 확장 요청을 저장하여 Get-Saved-Request Tool을 사용하여 검색
• : 해머 : 새 HTTP / 1.1 및 HTTP / 2 요청을 보내고 요청 로그 탭에서 볼 -:pencil2: 빠른 tweaking를 위한 regex 끈 보충을 가진 저장된 요구 (LLMs를 위한 반복 같이)

BurpMCP

BurpMCP is a Burp Suite extension that augments application security testers, vulnerability researchers, and bug bounty hunters with modern AI. Every day, large language models gain larger context windows, faster response times, and improved knowledge and reasoning skills. BurpMCP lets you take advantage of these capabilities while testing HTTP-based applications, providing a super-intelligent sidekick to help navigate unfamiliar attack surfaces and chase down complex vulnerabilities.

BurpMCP focuses on enhancing manual application security testing with the help of LLMs by integrating Burp Suite with Model Context Protocol (MCP) clients like Claude Desktop, Cursor, etc. so you can prompt AI to perform autonomous testing on your behalf with full control and visibility of the model’s actions.

Features:

• :notebook: Save requests in the extension for MCP clients to retrieve using the Get-Saved-Request Tool
• :hammer: Send new HTTP/1.1 and HTTP/2 requests and view them in the Request Logs tab
• :pencil2: Resend saved requests with regex string replacements for faster tweaking (like Repeater for LLMs)
• :satellite: Generate Collaborator payloads and retrieve interactions for LLM-led out-of-band testing
• :microscope: View all MCP messages in the Server logs tab for easy debugging

The extension starts an MCP Server that interfaces directly with the Burp Suite extension API. For more information on Model Context Protocol, refer to the docs.

Installation

Download the jar file from the releases and load it into Burp to install.

The MCP server runs by default on localhost port 8181 over SSE. The configuration syntax varies depending on your MCP client, but here are a few examples:

Cline:

{
  "mcpServers": {
    "burpmcp": {
      "autoApprove": [],
      "disabled": false,
      "timeout": 30,
      "url": "http://localhost:8181/mcp/sse",
      "transportType": "sse"
    }
  }
}

Dive:

{
  "mcpServers": {
    "BurpMCP": {
      "transport": "sse",
      "url": "http://localhost:8181/mcp/sse"
    }
  }
}

To use BurpMCP with STDIO-only clients like Claude Desktop, download the stdio-bridge.py script and install the required dependencies:

pip3 install typer mcp

Then, add the following configuration to your claude_desktop_config.json. Make sure the host and port match what you configure in BurpMCP.

{
  "mcpServers": {
    "BurpMCP": {
      "command": "python3",
      "args": ["path/to/stdio-bridge.py", "http://localhost:8181/mcp/sse"],
      "env": {}
    }
  }
}

Usage

To send requests to BurpMCP, right-click any request and click `Extensions -> Send to BurpMCP".