概述

使用模型上下文协议（MCP）将 Burp Suite 与 AI 客户端集成。

有关该方案的更多信息，请访问：modelcontextprotocol.io

特色

• 通过MCP将Burp Suite与AI客户端连接
• Claude Desktop 自动安装
• 自带打包的Stdio MCP代理服务器

用途

• 在 Burp Suite 中安装扩展
• 在扩展设置中配置你的 Burp MCP 服务器
• 配置您的MCP客户端以使用Burp SSE MCP服务器或stdio代理
• 通过你的客户与Burp互动！

安装

先决条件

在建造和安装扩建部分前，确保满足以下先决条件：

1. Java：Java 必须安装并可用在您的系统的 PATH。您可以通过在终端中运行 java --version 来验证这一点。
2. jar 命令：jar 命令必须可执行且可在系统 PATH 中使用。您可以通过在终端中运行 jar --version 来验证这一点。这是构建和安装扩展所必需的。

建设扩建部分

1. 克隆仓库：获取MCP服务器扩展的源代码。

Burp Suite MCP Server Extension

Overview

Integrate Burp Suite with AI Clients using the Model Context Protocol (MCP).

For more information about the protocol visit: modelcontextprotocol.io

Features

• Connect Burp Suite to AI clients through MCP
• Automatic installation for Claude Desktop
• Comes with packaged Stdio MCP proxy server

Usage

• Install the extension in Burp Suite
• Configure your Burp MCP server in the extension settings
• Configure your MCP client to use the Burp SSE MCP server or stdio proxy
• Interact with Burp through your client!

Installation

Prerequisites

Ensure that the following prerequisites are met before building and installing the extension:

1. Java: Java must be installed and available in your system’s PATH. You can verify this by running java --version in your terminal.
2. jar Command: The jar command must be executable and available in your system’s PATH. You can verify this by running jar --version in your terminal. This is required for building and installing the extension.

Building the Extension

1. Clone the Repository: Obtain the source code for the MCP Server Extension.

   git clone https://github.com/PortSwigger/mcp-server.git
   

2. Navigate to the Project Directory: Move into the project’s root directory.

   cd mcp-server
   

3. Build the JAR File: Use Gradle to build the extension.

   ./gradlew embedProxyJar
   

   This command compiles the source code and packages it into a JAR file located in build/libs/burp-mcp-all.jar.

Loading the Extension into Burp Suite

1. Open Burp Suite: Launch your Burp Suite application.
2. Access the Extensions Tab: Navigate to the Extensions tab.
3. Add the Extension:
   • Click on Add.
   • Set Extension Type to Java.
   • Click Select file ... and choose the JAR file built in the previous step.
   • Click Next to load the extension.

Upon successful loading, the MCP Server Extension will be active within Burp Suite.

Configuration

Configuring the Extension

Configuration for the extension is done through the Burp Suite UI in the MCP tab.

• Toggle the MCP Server: The Enabled checkbox controls whether the MCP server is active.
• Enable config editing: The Enable tools that can edit your config checkbox allows the MCP server to expose tools which can edit Burp configuration files.
• Advanced options: You can configure the port and host for the MCP server. By default, it listens on http://127.0.0.1:9876.

Claude Desktop Client

To fully utilize the MCP Server Extension with Claude, you need to configure your Claude client settings appropriately. The extension has an installer which will automatically configure the client settings for you.

1. Currently, Claude Desktop only support STDIO MCP Servers for the service it needs.