BurpSuite MCP Server

A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functionalities.

? Features

? Proxy Tool

• Intercept and modify HTTP/HTTPS traffic
• View and manipulate requests/responses
• Access proxy history
• Real-time request/response manipulation

# Intercept a request
curl -X POST "http://localhost:8000/proxy/intercept" 
  -H "Content-Type: application/json" 
  -d '{
    "url": "https://example.com",
    "method": "GET",
    "headers": {"User-Agent": "Custom"},
    "intercept": true
  }'

# View proxy history
curl "http://localhost:8000/proxy/history"

? Scanner Tool

• Active and passive scanning
• Custom scan configurations
• Real-time issue tracking
• Scan status monitoring

# Start a new scan
curl -X POST "http://localhost:8000/scanner/start" 
  -H "Content-Type: application/json" 
  -d '{
    "target_url": "https://example.com",
    "scan_type": "active",
    "scan_configurations": {
      "scope": "strict",
      "audit_checks": ["xss", "sqli"]
    }
  }'

# Check scan status
curl "http://localhost:8000/scanner/status/scan_1"

# Stop a scan
curl -X DELETE "http://localhost:8000/scanner/stop/scan_1"

? Logger Tool

• Comprehensive HTTP traffic logging
• Advanced filtering and search
• Vulnerability detection
• Traffic analysis
• Suspicious pattern detection

# Get filtered logs
curl "http://localhost:8000/logger/logs?filter[method]=POST&filter[status_code]=200"

# Search logs
curl "http://localhost:8000/logger/logs?search=password"

# Get vulnerability analysis
curl "http://localhost:8000/logger/vulnerabilities"

# Get comprehensive analysis
curl "http://localhost:8000/logger/analysis"

# Clear logs
curl -X DELETE "http://localhost:8000/logger/clear"

curl "http://localhost:8000/logger/vulnerabilities/severity"

? Vulnerability Detection

Automatically detects multiple types of vulnerabilities: - ? XSS (Cross-Site Scripting) - ? SQL Injection - ?️ Path Traversal - ? File Inclusion - ? SSRF (Server-Side Request Forgery) - ? XXE (XML External Entity) - ? CSRF (Cross-Site Request Forgery) - ? Open Redirect - ⚡ Command Injection

?️ Setup

1. Clone the repository

git clone https://github.com/X3r0K/BurpSuite-MCP-Server.git
cd BurpSuite-MCP-Server

1. Install Dependencies

   pip install -r requirements.txt

2. Configure Environment

   # Copy .env.example to .env
   cp .env.example .env
   
   # Update the values in .env
   BURP_API_KEY=Your_API_KEY
   BURP_API_HOST=localhost
   BURP_API_PORT=1337
   BURP_PROXY_HOST=127.0.0.1
   BURP_PROXY_PORT=8080
   MCP_SERVER_HOST=0.0.0.0
   MCP_SERVER_PORT=8000

3. Start the Server

   python main.py

The server will start on http://localhost:8000

? Analysis Features

Traffic Analysis

• Total requests count
• Unique URLs
• HTTP method distribution
• Status code distribution
• Content type analysis
• Average response time

Vulnerability Analysis

• Vulnerability type summary
• Top vulnerable endpoints
• Suspicious patterns
• Real-time vulnerability detection

Log Filtering

• By HTTP method
• By status code
• By URL pattern
• By content type
• By content length
• By time range
• By vulnerability type

? Security Considerations

1. Run in a secure environment
2. Configure appropriate authentication
3. Use HTTPS in production
4. Keep BurpSuite API key secure
5. Monitor and audit access

? API Documentation

For detailed API documentation, visit: - Swagger UI: http://localhost:8000/docs - ReDoc: http://localhost:8000/redoc

Cursor Integration

The MCP server is configured to work seamlessly with Cursor IDE. The .cursor directory contains all necessary configuration files:

Configuration Files

1. settings.json: Contains MCP server configuration
2. Server host and port settings
3. Endpoint configurations
4. BurpSuite proxy settings
5. Logger settings

6. Python interpreter path

7. tasks.json: Defines common tasks

8. Start MCP Server
9. Run Vulnerability Tests

10. Check Vulnerabilities

11. launch.json: Contains debugging configurations

12. Debug MCP Server
13. Debug Vulnerability Tests

Using in Cursor

1. Open the project in Cursor
2. The MCP server configuration will be automatically loaded
3. Access features through:
4. Command Palette (Ctrl+Shift+P) for running tasks
5. Debug menu for debugging sessions
6. Automatic Python interpreter configuration

The server will be accessible at http://localhost:8000 with the following endpoints: - /proxy/intercept for request interception - /logger for logging functionality - /logger/vulnerabilities/severity for vulnerability analysis

? License

This project is licensed under the MIT License - see the LICENSE file for details.

? Acknowledgments

• BurpSuite - The original security testing tool
• FastAPI - The web framework used
• Python - The programming language used