CC-Bridge

A Burp Suite (Montoya API) extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell (Claude Code, OpenAI Codex, etc.) can drive Burp from curl.

Works on Burp Community.

Download

Grab the latest release JAR — no clone or build required:

→ cc-bridge-0.1.0.jar (381 KB · sha256 10e21b82a602e43df62ffa2758ef3f51a24af8e1a04affa82ef12d02bde9192c)

All releases: https://github.com/larrypeseckis/burp-cc-bridge/releases

For validation results across 7 PortSwigger Web Security Academy labs spanning 6 vulnerability classes (250 cc-burp calls, 6 solves, 1 documented architectural boundary, 0 GUI fallbacks), see VALIDATION.md.

Build from source

mvn clean package
# -> target/cc-bridge-0.1.0.jar  (shaded fat JAR)

Install

1. Open Burp → Extensions → Installed → Add.
2. Type Java, point at target/cc-bridge-0.1.0.jar, click Next.
3. The Output tab should print:
   root@kitploit:~

   CC-Bridge listening on http://127.0.0.1:1337
   Auth token written to ~/.cc-bridge-token (mode 600)
   

4. From a shell:
   root@kitploit:~

   curl -sH "Authorization: Bearer $(cat ~/.cc-bridge-token)" http://127.0.0.1:1337/health
   

Override bind host/port at JVM args (Extension settings → JVM properties): -Dccbridge.host=127.0.0.1 -Dccbridge.port=1337

API

All endpoints require Authorization: Bearer <token>.

Shell wrapper

./cc-burp health
./cc-burp send -d '{"method":"GET","url":"https://example.com/"}'
./cc-burp history 'host=example.com&limit=10'
./cc-burp 'history/42'
./cc-burp 'repeat/42' -d '{"headers":{"X-Spoof":"1"}}'
./cc-burp 'collaborator/new' -X POST

Notes

• Outbound requests go through Burp's HTTP client, so they show in Proxy history and respect scope, upstream proxies, and session-handling rules.
• The token is regenerated only if ~/.cc-bridge-token is missing or empty. Delete it to rotate.
• Bind is 127.0.0.1 by default — never expose this to the network.