Burp Suite MCP Server
About
Burp Suite MCP Server is a Model Context Protocol server that enables LLMs to retrieve data from Burp Suite proxy history using SQL-like queries. It is designed for security researchers and penetration testers to streamline security testing and analysis.
Details
- Author
- N0el4kLs
- Downloads
- 515
- Categories
- Other
Jump to
- SQL-like query syntax to retrieve data from Burp Suite proxy history
- Select specific fields (raw request/response, method, URL, host, body, status code)
- Avoid excessive context length by returning only needed fields
- Works with any MCP-compatible client
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Burp Suite MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install the Burp Suite extension (JAR file) and load it in Burp Suite (it starts an HTTP server on port 8889). Install Python dependencies with uv sync, then configure an MCP client (e.g., Claude Desktop) with the command python /ABSOLUTE_PATH_TO/burpsuite_mcp.py.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"burp suite mcp server": {
"burpmcp-n0el4kls": {
"command": "uv",
"args": [
"sync"
]
}
}
}
}McpServers
{
"burpmcp-n0el4kls": {
"command": "uv",
"args": [
"sync"
]
}
}Burp Suite MCP Server
项目简介
BurpsuiteMCP 是一个模型上下文协议服务器，允许LLMs从Burp Suite代理历史记录中检索数据, 从而帮助研究人员和渗透测试人员更有效地进行安全测试和分析。
该项目灵感来自于GhidraMCP
主要功能
- 基于SQL的数据查询：使用类似SQL的语法从Burp Suite代理历史记录中检索数据
目前支持从Burp Suite代理历史记录中检索数据包括:
- 原始请求
- 请求类型(POST, GET, etc.)
- 请求URL
- Host
- 请求体
- 原始响应
- 响应类型
- 响应状态码
- 响应体
相比于官方的MCP：
优点：
1. 可以指定 HTTP History 的返回字段, 避免同意返回带来上下文过长的问题。
缺点：
1. 其他功能没官方多
2. 也没有UI
演示
https://github.com/user-attachments/assets/466e0c4a-137d-4589-a8e7-7ffbb37fb863
安装说明
前提条件
- Java 17 或更高版本
- Python 3.11或更高版本
安装步骤
1. 安装Burp Suite扩展：
- 下载最新的MCPBurpExtension.jar文件
- 在Burp Suite中，打开"扩展"选项卡
- 点击"添加"按钮，选择"Java扩展"
- 选择下载的JAR文件
- 扩展将在端口8889上启动HTTP服务器
2. 安装Python依赖：
uv sync
使用指南
基本用法
use MCP Client
{
"mcpServers": {
"burpsuite": {
"command": "python",
"args": [
"/ABSOLUTE_PATH_TO/burpsuite_mcp.py"
]
}
}
}
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
