mcp-server

Name: mcp-server
Availability: InStock
Author: PortSwigger

MCP Server for Burp

GitHub

GitHub Stars

266

User Rating

Not Rated

Favorites

Views

Forks

Issues

Installation

Difficulty

Intermediate

Estimated Time

10-20 minutes

Requirements

Java: 必要なバージョンは記載されていないが、一般的に最新の安定版を推奨

Gradle: 最新版が必要

Installation

Prerequisites

Please specify required software and versions:

Java: Java must be installed and available in your system's PATH.

jar Command: The jar command must be executable and available in your system's PATH.

Installation Steps

1. Clone Repository

bash
git clone https://github.com/PortSwigger/mcp-server.git

2. Navigate to Project Directory

bash
cd mcp-server

3. Build the JAR File

bash
./gradlew embedProxyJar

This command compiles the source code and packages it into a JAR file located in build/libs/burp-mcp-all.jar.

4. Load the Extension into Burp Suite

1Open Burp Suite.

2Navigate to the Extensions tab.

3Click on Add, set Extension Type to Java.

4Select the JAR file built in the previous step and click Next to load the extension.

Configuration

Basic Configuration

Configuring the Extension

Configuration for the extension is done through the Burp Suite UI in the MCP tab.

Toggle the MCP Server: The Enabled checkbox controls whether the MCP server is active.

Enable config editing: The Enable tools that can edit your config checkbox allows the MCP server to expose tools which can edit Burp configuration files.

Advanced options: You can configure the port and host for the MCP server. By default, it listens on http://127.0.0.1:9876.

Examples

Basic Usage

Here are basic usage examples for the MCP server:

Programmatic Usage

javascript
// JavaScript example (Node.js)
const { MCPClient } = require('@modelcontextprotocol/client');

const client = new MCPClient();
await client.connect();

// Execute tool
const result = await client.callTool('toolName', {
  parameter1: 'value1',
  parameter2: 'value2'
});

console.log(result);

Using with Claude Desktop

1Verify MCP Server Startup

Open Claude Desktop and confirm that the configuration has been loaded correctly.

2Execute Basic Commands


   Available tools from this MCP server:
   - tool1: Description of tool1
   - tool2: Description of tool2

Use Cases

Using Burp Suite to have AI analyze vulnerabilities in a web application.

Generating automated reports during security testing using AI.

Dynamically adjusting parameters of specific security tools via AI clients.

Running multiple AI clients simultaneously to conduct different vulnerability scans.

Additional Resources

GitHub Repository

Author Information

PortSwigger

United Kingdom

GitHub

1,294

Followers

481

Repositories

Gists

Total Contributions