rrsaldanha/burp-mcp-agents

View on GitHub by @rrsaldanha

🚀 Connect Burp Suite MCP Server to multiple AI backends with practical guides and templates for safe, real traffic analysis.

What's novel

🚀 Connect Burp Suite MCP Server to multiple AI backends with practical guides and templates for safe, real traffic analysis.

Code Analysis

15 files read · 4 rounds

A collection of zsh scripts and Python agents that bridge Burp Suite's MCP server to local AI backends (Ollama, LM Studio) via a Caddy reverse proxy, enabling AI-assisted security analysis of captured traffic through tool-calling loops.

Strengths

The Caddy reverse proxy workaround for Burp MCP's anti-DNS-rebinding protection is a genuinely practical and clever solution to a real problem. The prompts are well-structured, evidence-based, and safety-conscious, providing a solid workflow for AI-assisted vulnerability analysis.

Weaknesses

The README is severely misleading, describing a downloadable application with installers and settings tabs that don't exist in the code. There are zero tests, significant code duplication between the Ollama and LM Studio agents, and the project is clearly early-stage with no CI/CD or automated verification.

Score Breakdown

Innovation

5 (25%)

Craft

54 (35%)

Traction

11 (15%)

Scope

37 (25%)

Signal breakdown

Innovation

Not Fork+1

Code Novelty+1

Concept Novelty+1

Craft

Ci+0

Tests-1

Polish+1

Releases+1

Has License+5

Code Quality+15

Readme Quality+15

Recent Activity+7

Structure Quality+4

Commit Consistency+2

Has Dependency Mgmt+5

Traction

Forks+0

Stars+6

Hn Points+0

Watchers+3

Early Traction+0

Devto Reactions+0

Community Contribs+2

Scope

Commits+3

Languages+5

Subsystems+0

Bloat Penalty+0

Completeness+7

Contributors+6

Authored Files+8

Readme Code Match+3

Architecture Depth+3

Implementation Depth+8

Evidence

Commits

Contributors

Files

Active weeks

TestsCI/CDREADMELicenseContributing

Repository

Language

Python

Stars

Forks

License

MIT