Burp Wrapper FAQs

Question 1

Which Burp Suite tools can be controlled via the REST API?

Accepted Answer

Burp Wrapper provides extensive REST API coverage for key Burp Suite tools including Proxy, Repeater, Intruder, Scanner, Collaborator, Target, Decoder, and various configuration settings, offering deep control over security testing tasks.

Question 2

How is Burp Wrapper installed and accessed?

Accepted Answer

Burp Wrapper is installed as a standard Java extension within Burp Suite Pro. Once loaded, the REST API automatically becomes available on `http://127.0.0.1:8089`, ready for HTTP interactions from any programming language or scripting environment.

Question 3

What is Burp Wrapper and its core purpose?

Accepted Answer

Burp Wrapper is a Burp Suite Pro extension that exposes the entire Burp Suite Montoya API as a REST HTTP server. Its core purpose is to enable AI agents, automation scripts, and external tools to programmatically interact with Burp's comprehensive security testing functionalities.

Question 4

Who is Burp Wrapper designed for?

Accepted Answer

It's specifically designed for AI agents (e.g., Claude Code, Gemini CLI) and automation scripts. Developers, bug bounty hunters, and penetration testers can leverage it to integrate Burp Suite's powerful features into automated workflows and custom security tools.

Question 5

Can Burp Wrapper integrate with any programming language or script?

Accepted Answer

Yes, absolutely. As a standard REST HTTP API that communicates using JSON-formatted requests and responses, Burp Wrapper is language-agnostic and can be easily integrated with Python, Java, JavaScript, curl, or any system capable of making HTTP requests.

Burp Wrapper

Burp Wrapper

主な機能

ユースケース

主な機能

ユースケース