BurpMCP

Created By
swgeea year ago
Burp Suite Extension with MCP Server to enhance manual application security testing
Overview

what is BurpMCP?

BurpMCP is a Burp Suite extension designed to enhance application security testing by integrating modern AI capabilities, providing a super-intelligent sidekick for vulnerability researchers and bug bounty hunters.

how to use BurpMCP?

To use BurpMCP, download the jar file from the releases and load it into Burp Suite. Configure your MCP client to connect to the BurpMCP server running on localhost port 8181.

key features of BurpMCP?

  • Integration with large language models (LLMs) for enhanced manual testing.
  • Clean user interface for easy request management.
  • Support for both HTTP 1.1 and 2.
  • Ability to save and retrieve requests with additional context.

use cases of BurpMCP?

  1. Assisting in manual testing of web applications.
  2. Enhancing vulnerability research with AI-driven insights.
  3. Streamlining bug bounty hunting processes.

FAQ from BurpMCP?

  • What is the purpose of BurpMCP?

BurpMCP aims to augment security testing by leveraging AI to assist testers in navigating complex vulnerabilities.

  • Is BurpMCP free to use?

Yes! BurpMCP is open-source and free to use.

  • How do I install BurpMCP?

Simply download the jar file and load it into Burp Suite.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
swgee
Star
16
Language
Java
License
MIT license

Recommend Servers

View All
Bring your real authenticated browser session to AI coding agents. Local-first MCP server + Chrome MV3 extension. No cloud. No telemetry.
@Cubenest

peek records the user's actual logged-in browser (DOM via rrweb, console events, network metadata, optional response bodies via opt-in Deep capture) through a Chrome MV3 extension. The extension ships events through a native-messaging stdio bridge to a local MCP server (peek-mcp), which persists them to a SQLite database at ~/.peek/sessions.db. AI coding agents (Claude Code, Cursor, Cline, Windsurf) read sessions from the database via 10 MCP tools: Tool What it does list_recent_sessions List recently recorded sessions (id, origin, ts, event count). get_session_summary LLM-readable narrative summary of a session. get_session_console_errors Console errors recorded in a session. get_session_network_errors Failed/notable network requests in a session. get_user_action_before_error Last N user actions before a console error. generate_playwright_repro Generate a runnable Playwright test from a session. get_dom_snapshot Reconstruct the DOM at a given timestamp. query_dom_history Timeline of attribute/text changes for a selector. request_authorization Side-panel consent for write actions (Level 3). execute_action Dispatch a UI action (gated by permission level + destructive blocklist). Why local-first matters Every other "browser session for AI" tool ships to a vendor cloud. peek's SQLite + extension live on the user's machine — no remote endpoints, no telemetry. The privacy policy (docs/peek/PRIVACY_POLICY.md) is the source of truth. Install # 1. Add the MCP server to Claude Code claude mcp add peek -- npx -y @peekdev/mcp # 2. Install the Chrome extension from the Chrome Web Store # (link added once the CWS listing is approved)

a day ago
Crevio

2 days ago