Burpsuite MCP Server

🚀 BurpSuite MCP Server

A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functions.

✨ Features

🔄 Proxy Tools

• Intercept and modify HTTP/HTTPS traffic.
• View and manipulate requests/responses.
• Access proxy history.
• Perform real-time request/response operations.

# Intercept a request
curl -X POST "http://localhost:8000/proxy/intercept" -H "Content-Type: application/json" -d '{"url":"https://example.com","method":"GET"}'

# View proxy history
curl http://localhost:8000/proxy/history

# Clear proxy history
curl -X DELETE http://localhost:8000/proxy/clear

📝 Logging Functions

• Collect and analyze traffic data.
• Detect potential vulnerabilities.
• Generate security reports.
• Provide real-time monitoring.

# Log a request
curl -X POST "http://localhost:8000/logger" -H "Content-Type: application/json" -d '{"endpoint":"/api/v1/login","method":"POST","body":{"username":"admin","password":"secret"}}'

# Get log summary
curl http://localhost:8000/logger-summary

# Export logs
curl http://localhost:8000/export-logs

📊 Analysis Functions

Traffic Analysis

• Total request count statistics.
• Unique URL statistics.
• HTTP method distribution.
• Status code distribution.
• Content type analysis.
• Average response time.

Vulnerability Analysis

• Summary of vulnerability types.
• Key vulnerable endpoints.
• Suspected pattern recognition.
• Real-time vulnerability detection.

🔒 Security Considerations

1. Run in a secure environment.
2. Configure appropriate authentication.
3. Use HTTPS in production environments.
4. Keep BurpSuite API keys secure.
5. Monitor and audit access.

📚 Documentation

For detailed API documentation, please visit:

• Swagger UI: http://localhost:8000/docs
• ReDoc: http://localhost:8000/redoc

Cursor Integration

The MCP server is configured to work seamlessly with the Cursor IDE. The cursor folder contains all necessary configuration files:

Configuration Files

1. settings.json: Contains MCP server configuration.

   • Server host and port settings.
   • Endpoint configuration.
   • BurpSuite proxy settings.
   • Logging settings.
   • Python interpreter path.

2. tasks.json: Defines common tasks.

   • Start the MCP server.
   • Run vulnerability tests.
   • Check for vulnerabilities.

3. launch.json: Contains debugging configurations.

   • Debug the MCP server.
   • Debug vulnerability tests.

Usage in Cursor

1. Open the project in Cursor.
2. Automatically load the MCP server configuration.
3. Access features in the following ways:
   • Use the command panel (Ctrl+Shift+P) to execute tasks.
   • Use the debugging menu for debugging sessions.
   • Automatically configure the Python interpreter.

The server will be available at http://localhost:8000. The main endpoints are:

• /proxy/intercept for request interception.
• /logger for logging functions.
• /logger/vulnerabilities/severity for vulnerability analysis.

![image](https://github.com