X3r0k BurpSuite MCP Server

🛡️ BurpSuite MCP Server

A powerful implementation of the Model Context Protocol (MCP) server for BurpSuite, providing programmatic access to Burp's core features.

🚀 Quick Start

This is a powerful Model Context Protocol (MCP) server implementation for BurpSuite, offering programmatic access to Burp's core features.

✨ Features

🔄 Proxy Tools

• Intercept and modify HTTP/HTTPS traffic.
• View and manipulate requests/responses.
• Access the proxy history.
• Real-time request/response interception.

🔍 Scanner

• Vulnerability Scanning: Automatically identify common security vulnerabilities in web applications, such as SQL injection, XSS, etc.
• Crawler Function: Deeply traverse the target website to discover hidden links and resources.
• Passive Scanning: Detect potential security issues without active attacks.

📊 Logging

• Monitor and record all network traffic in real-time.
• Support log filtering and search functions.
• Provide detailed access log analysis.

💡 Vulnerability Detection

• Automatically identify common web vulnerabilities, such as directory traversal, file inclusion, etc.
• Provide a vulnerability priority sorting function.
• Generate detailed vulnerability reports.

📦 Installation

1. Install Dependencies:

   • Python 3.8 or higher.
   • FastAPI and other related libraries.

2. Environment Setup:

   • Configure the BurpSuite API key.
   • Set the proxy server address and port.
   • Configure the log storage path.

💻 Usage Examples

Basic Usage

1. Clone the repository:

   git clone https://github.com/yourusername/burpsuite-mcp.git
   cd burpsuite-mcp
   

2. Install dependencies:

   pip install -r requirements.txt
   

3. Start the server:

   uvicorn main:app --reload
   

4. Access the documentation:

   • Swagger UI: http://localhost:8000/docs
   • ReDoc: http://localhost:8000/redoc

🚧 Security Precautions

⚠️ Important Note

• Run in a secure environment.
• Configure an appropriate authentication mechanism.
• Use HTTPS in a production environment.
• Protect the BurpSuite API key.
• Monitor and audit access logs.

📋 Integration and Extension

Cursor IDE Integration

This project is configured to work seamlessly with the Cursor IDE. The .cursor folder contains all the necessary configuration files:

Configuration Files

1. settings.json: MCP server configuration

   • Server host and port settings.
   • Endpoint configuration.
   • BurpSuite proxy settings.
   • Logging settings.
   • Python interpreter path.

2. tasks.json: Define common tasks

   • Start the MCP server.
   • Execute vulnerability tests.
   • Check for vulnerabilities.

3. launch.json: Contains debugging configurations

   • Debug the MCP server.
   • Debug vulnerability tests.

Usage in Cursor

1. Open the project in Cursor.
2. Automatically load the MCP server configuration.
3. Access the features in the following ways:
   • Run tasks via the command panel (Ctrl+Shift+P).
   • Start a debugging session from the debugging menu.
   • Automatically configure the Python interpreter.

The MCP server will be available at http://localhost:8000. The main endpoints are as follows:

• /proxy/intercept: Request interception.
• /logger: Logging function.
• /logger/vulnerabilities/severity: Vulnerability analysis.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙏 Acknowledgments

• BurpSuite - The original security testing tool.
• FastAPI - The web framework used.
• Python - The programming language used.