I find academic articles and books for research and literature reviews.

Burpsuite MCP Server
A Model Context Protocol (MCP) server that provides an interface for interacting with Burpsuite Professional's scanning and proxy functionality.
Overview
This MCP server allows AI assistants to interact with Burpsuite Professional for web security testing and vulnerability scanning. It provides tools for:
- Starting vulnerability scans on target URLs
- Checking scan status and retrieving results
- Accessing HTTP/HTTPS traffic captured by Burp Proxy
- Viewing site structure discovered during scanning
Features
Tools
The server exposes the following tools:
-
start_scan: Start a new vulnerability scan on a target URL
- Parameters:
-
target
: Target URL to scan (e.g., https://example.com) -
scan_type
: Type of scan to perform (passive, active, or full)
-
- Parameters:
-
get_scan_status: Check the status of a running scan
- Parameters:
-
scan_id
: ID of the scan to check
-
- Parameters:
-
get_scan_issues: Get vulnerability issues found in a scan
- Parameters:
-
scan_id
: ID of the scan -
severity
: Filter issues by severity (high, medium, low, info, or all)
-
- Parameters:
-
get_proxy_history: Get HTTP/HTTPS traffic captured by Burp Proxy
- Parameters:
-
host
: Filter by host (optional) -
method
: Filter by HTTP method (optional) -
status_code
: Filter by HTTP status code (optional) -
limit
: Maximum number of items to return (default: 10)
-
- Parameters:
-
get_site_map: Get the site structure discovered during scanning and browsing
- Parameters:
-
host
: Filter by host (optional) -
with_parameters
: Only show URLs with parameters (optional) -
limit
: Maximum number of items to return (default: 20)
-
- Parameters:
Resources
The server provides the following resources:
-
Scan Results:
burpsuite://scan/{scanId}
-
Issue Details:
burpsuite://scan/{scanId}/issue/{issueId}
-
Proxy History:
burpsuite://proxy/history
-
Proxy History Item:
burpsuite://proxy/history/{itemId}
-
Site Map:
burpsuite://sitemap
Installation
-
Build the server:
cd /path/to/burpsuite-server npm install npm run build
-
Add the server to your MCP settings configuration file:
{ "mcpServers": { "burpsuite": { "command": "node", "args": ["/path/to/burpsuite-server/build/index.js"], "env": {}, "disabled": false, "autoApprove": [] } } }
Future Enhancements
This server currently provides mock functionality. To connect it to a real Burpsuite Professional instance:
- Configure Burpsuite Professional to expose its REST API
- Update the server implementation to connect to the Burpsuite REST API
- Add authentication mechanisms for secure API communication
Example Usage
Here are some examples of how to use the Burpsuite MCP server with an AI assistant:
Starting a Scan
Use the Burpsuite MCP server to scan example.com for vulnerabilities.
Viewing Proxy History
Show me the HTTP traffic captured by Burp Proxy for domain example.com.
Analyzing Vulnerabilities
What high severity vulnerabilities were found in the latest scan?
相关推荐
Confidential guide on numerology and astrology, based of GG33 Public information
Converts Figma frames into front-end code for various mobile frameworks.
Advanced software engineer GPT that excels through nailing the basics.
Take an adjectivised noun, and create images making it progressively more adjective!
Siri Shortcut Finder – your go-to place for discovering amazing Siri Shortcuts with ease
Entdecken Sie die umfassendste und aktuellste Sammlung von MCP-Servern auf dem Markt. Dieses Repository dient als zentraler Hub und bietet einen umfangreichen Katalog von Open-Source- und Proprietary MCP-Servern mit Funktionen, Dokumentationslinks und Mitwirkenden.
Die All-in-One-Desktop & Docker-AI-Anwendung mit integriertem Lappen, AI-Agenten, No-Code-Agent Builder, MCP-Kompatibilität und vielem mehr.
Mirror ofhttps: //github.com/bitrefill/bitrefill-mcp-server
Ein leistungsstarkes Neovim -Plugin für die Verwaltung von MCP -Servern (Modellkontextprotokoll)
Reviews

user_tqYjeNfl
Burpsuite-mcp-server by Cyreslab-AI is a fantastic tool for managing multiple Burp Suite instances. It's incredibly useful for coordinating and automating security testing tasks, especially in complex environments. The ease of use and integration capabilities make it a must-have for security professionals. Highly recommended for anyone looking to streamline their penetration testing processes!