MCP.so
ログイン

Burp Suite MCP Server

@N0el4kLs

基本情報

カテゴリ

その他

トランスポート

stdio

作者

N0el4kLs

Burp Suite MCP Server について

MCP Server for Burpsuite

Burp Suite MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "burpmcp-n0el4kls": {
      "command": "uv",
      "args": [
        "sync"
      ]
    }
  }
}

Burp Suite MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Burp Suite MCP Server?

Burp Suite MCP Server is a Model Context Protocol server that enables LLMs to retrieve data from Burp Suite proxy history using SQL-like queries. It is designed for security researchers and penetration testers to streamline security testing and analysis.

How to use Burp Suite MCP Server?

Install the Burp Suite extension (JAR file) and load it in Burp Suite (it starts an HTTP server on port 8889). Install Python dependencies with uv sync, then configure an MCP client (e.g., Claude Desktop) with the command python /ABSOLUTE_PATH_TO/burpsuite_mcp.py.

Key features of Burp Suite MCP Server

  • SQL-like query syntax to retrieve data from Burp Suite proxy history
  • Select specific fields (raw request/response, method, URL, host, body, status code)
  • Avoid excessive context length by returning only needed fields
  • Works with any MCP-compatible client

Use cases of Burp Suite MCP Server

  • Automate analysis of captured HTTP requests and responses during penetration testing
  • Query specific request patterns (e.g., all POST requests to a target host)
  • Integrate LLM-based security analysis with Burp Suite proxy logs
  • Selectively extract response bodies or headers for further inspection

よくある質問

1

How does this server differ from the official Burp Suite MCP server?

It allows you to specify which fields to return from HTTP History, reducing context length. However, it has fewer features and no user interface.

2

What are the runtime requirements?

Java 17 or higher and Python 3.11 or higher are required. The Burp Suite extension runs on port 8889.

3

Where does the data come from?

Data is retrieved in real time from the Burp Suite proxy history using SQL-like queries. No external storage is used.

4

What transport and authentication does it use?

The server communicates via HTTP on localhost port 8889. No authentication is mentioned.

5

What are the known limitations?

Compared to the official server, it has fewer features and no graphical UI.

コメント

「その他」の他のコンテンツ