Thanks for your interest in contributing! Here's how to get started.
-
Clone the repo:
git clone https://github.com/six2dez/burp-ai-agent.git cd burp-ai-agent -
Requirements: Java 21 (Temurin or Oracle JDK). Ensure
JAVA_HOMEis set. -
Build:
./gradlew clean shadowJar
Output JAR:
build/libs/Custom-AI-Agent-<version>.jar -
Run tests:
./gradlew test -
Lint and coverage (optional but recommended before opening a PR):
./gradlew ktlintFormat # auto-fix style ./gradlew ktlintCheck # verify style (non-blocking in CI until baseline is clean) ./gradlew jacocoTestReport # HTML at build/reports/jacoco/test/html/index.html
-
Load in Burp: Open Burp Suite, go to Extensions > Installed > Add, select the JAR.
src/main/kotlin/com/six2dez/burp/aiagent/
├── ui/ Swing UI components
├── config/ Settings and configuration
├── context/ Request/issue context collection
├── backends/ AI backend adapters (CLI + HTTP)
├── redact/ Privacy redaction pipeline
├── audit/ JSONL audit logging
├── scanner/ Passive and Active AI scanners
├── supervisor/ Backend lifecycle management
├── mcp/ MCP server and tools
├── agents/ Agent profile loader
└── App.kt Extension entry point
- Fork the repository.
- Create a feature branch from
main:git checkout -b feature/my-feature. - Make your changes. Follow the existing code style (Kotlin, no wildcard imports).
- Add tests if applicable.
- Run
./gradlew testand ensure all tests pass. - Commit with a clear message describing what and why.
- Open a Pull Request against
main.
- Kotlin with strict JSR-305 null-safety annotations.
- Keep a clear separation between UI, logic, and backend layers.
- Small, testable components. Favor pure functions for data transformations.
- No hardcoded secrets or credentials.
Open an issue with:
- Burp Suite version (Community or Pro).
- OS and Java version.
- Steps to reproduce.
- Extension output/error logs (Extensions > Installed > Output/Errors tabs).
See the Adding a Backend developer guide for implementing new AI backend adapters.
See the Adding MCP Tools developer guide.
Docs live in https://burp-ai-agent.six2dez.com/.
By contributing, you agree that your contributions will be licensed under the MIT License.