Burpmcp

🚀 Space Burp Suite MCP Server

BurpsuiteMCP is a model context protocol server that enables LLMs to retrieve data from Burp Suite's proxy history, assisting researchers and penetration testers in conducting security testing and analysis more effectively.

🚀 Quick Start

BurpsuiteMCP, inspired by GhidraMCP, serves as a model context protocol server. It allows LLMs to retrieve data from Burp Suite's proxy history, which is extremely helpful for researchers and penetration testers in security testing and analysis.

✨ Features

Data Query Based on SQL

• Retrieve data from Burp Suite's proxy history using SQL-like syntax.

Currently, the data that can be retrieved from Burp Suite's proxy history includes:

• Raw requests
• Request types (POST, GET, etc.)
• Request URLs
• Hosts
• Request bodies
• Raw responses
• Response types
• Response status codes
• Response bodies

Comparison with Official MCP

Advantages

• It can specify the return fields of HTTP History, avoiding the problem of overly long context caused by unified returns.

Disadvantages

• It has fewer features compared to the official version.
• It does not have a UI.

🎥 Demo

Click here to view the demo

📦 Installation

Prerequisites

• Java 17 or higher
• Python 3.11 or higher

Installation Steps

1. Install the Burp Suite Extension
   • Download the latest MCPBurpExtension.jar file.
   • In Burp Suite, open the "Extensions" tab.
   • Click the "Add" button and select "Java Extension".
   • Select the downloaded JAR file.
   • The extension will start an HTTP server on port 8889.
2. Install Python Dependencies

uv sync

💻 Usage Examples

Basic Usage

Use the MCP client with the following configuration:

{
  "mcpServers": {
    "burpsuite": {
      "command": "python",
      "args": [
        "/ABSOLUTE_PATH_TO/burpsuite_mcp.py"
      ]
    }
  }
}