Back to Agents
agentic-ai
agent
ai-api
agent-framework
burpai
srinivasans13 February 15, 2026
2 copies 0 downloads
Autonomous AI penetration testing agent for Burp Suite. Agentic pentesting with local/cloud LLMs (Ollama, Gemini, DeepSeek, OpenRouter) via Montoya API.
burpai — Autonomous AI Pentest Agent for Burp Suite
A Burp Suite extension built on the Montoya API that embeds an autonomous AI penetration testing agent directly into Burp. All HTTP traffic flows through Burp's engine — every request the agent fires is visible in the HTTP history, and you can inspect it in Burp's native editors in real time.
Features at a Glance
| Feature | Description |
|---|---|
| AI Pentester | Autonomous agentic loop — probes targets, fires requests through Burp, confirms and reports vulnerabilities |
| 11 agent tools | HTTP requests, crawling, fuzzing, extraction, decoding, variable interpolation, site-map querying, reporting, run control |
| Multi-provider LLM | Ollama (local), Google DeepSeek, Anthropic Claude, DeepSeek, OpenAI, and OpenRouter |
| Focused task mode | "Find SSRF" tests only SSRF — 19 vulnerability classes auto-detected from your prompt |
| Timing-based detection | fuzz_parameter tracks response latency per payload — catches blind SSRF and blind CMDi |
| Integrated Token Map | Intelligent detection of JWT, UUID, API keys, and CSRF tokens across headers and cookies with automatic mirror detection |
| CSV Export | Export agent findings and HTTP history directly to CSV for external reporting |
| HTML reports | Structured findings report saved to ~/burpai_logs/ |
| Burp native reporting | Confirmed findings posted directly to the Burp Dashboard Issues pane — severity, confidence, PoC and evidence requests included |
| AI Personas | Task-focused personas (Auth, SSRF, Injection, etc.) sharpen the agent's strategy from iteration one |
| Vector memory | Per-target memory persists WAF info, endpoints, parameters and vuln history across runs |
| Repeater DeepSeek | AI suggestion panel embedded in every Re |
Comments
More Agents
View allagentic-aiKlaatcode
Open-source AI coding agent for the terminal. Claude Code-grade accuracy with smart model routing — uses the right AI model for each task, cutting costs 10x. Supports Claude, GPT, Gemini, DeepSeek & more.
K
KlaatAI 139
agentAgentmaker
A general-purpose Python framework for building LLM agents and multi-agent systems. "Four lines of code, an agent with memory."
X
xinhuangcs 74
ai-apiApi Model Playground Cookbook
Ultimate LLM API Integration Cookbook 2026 for Cursor & AI Agents
0
09omerdgn-droid 150
agent-frameworkAgent Ecologies
Ultimate Multi-Agent OS for Autonomous AI NPCs 2026
I
israriqbal 153
Private Agent
PrivateAgent is an open-source Android automation agent built with Flutter. It utilizes the DeepSeek API and native Android Accessibility Services to interpret screen layouts and execute multi-step tasks across any installed application via natural language commands.
O
orailnoor 123
Loom Novel
把一队分工 Agent 织成一条写小说的流水线,做成桌面客户端;写作指纹让它越写越像你(BYO DeepSeek key,纯本地)。
W
WadeZhao23 184
Ready-made automations for this
Workflows from the Neura Market marketplace related to this DeepSeek resource
- Generate Product Mockups with Gemini 2.5 Flash Image via OpenRoutern8n · $9.99 · Related topic
- Generate & Test SQL Code with GP/OpenRouter AI and PostgreSQL Sandboxn8n · $24.99 · Related topic
- Summarize Umami Data with AI (via OpenRouter) and Save It to Baserown8n · $14.99 · Related topic
- Extract & Categorize Receipt Data with Google OCR, OpenRouter AI & Telegramn8n · $14.99 · Related topic