Skip to content

Install

Build Cursor Agent and load it into Burp Suite.

Source: github.com/zamdevio/burp-cursor-agent · Docs site: burp-cursor-agent.pages.dev

Requirements

RequirementNotes
JDK 21Needed to build with the included Gradle wrapper
Burp SuiteCommunity or Professional (Montoya extensions)
Cursor Agent CLIThe agent binary, authenticated (agent login)

Pick a launch profile

Burp hostRecommended profileNotes
Linux / macOSNativeagent on the same OS as Burp
Windows + agent in WSLWSLMost common Windows setup
Windows + Windows-native agentNative (Windows)No WSL bridge
Burp inside WSLNativeTreat as Linux — do not nest another WSL profile

Details, cwd, and resume: launch.md.

Build

From the repository root:

bash
./gradlew test shadowJar

Or the helper that runs the same gate:

bash
scripts/check

Loadable artifact:

text
build/libs/burp-cursor-agent-0.1.0-all.jar

Helpers (scripts/)

ScriptWhat it does
scripts/check./gradlew test shadowJar (build gate)
scripts/jar-pathPrint the shadow JAR path (fails if missing)
scripts/probe-agentResolve agent on PATH
scripts/test / scripts/cleanTest only / clean

Full list: scripts/README.md.

Load into Burp

  1. Extensions → Installed → Add

  2. Extension type: Java

  3. Select build/libs/burp-cursor-agent-0.1.0-all.jar

  4. Extension class:

    text
    io.zamdevio.burpai.BurpaiExtension
  5. Confirm the Suite tab Cursor Agent appears.

Do not auto-reload Burp unless you mean to — unloading the extension stops Agent processes and can interrupt in-flight chats.

First-run checklist

  1. CLI login — In the same environment that will run agent acp (native shell or WSL), run agent login (or your usual Cursor Agent auth flow) and confirm agent works.
  2. Launch profile — Open Cursor Agent → Settings → General, pick the profile for your host (table above), and confirm Launch preview.
  3. Working directory — Session cwd defaults to $HOME/BurpSuite when that folder exists, otherwise $HOME. Override in Settings if you hunt from a project tree.
  4. Permissions — Default Ask is safest for first use (permissions.md).
  5. MCP — Prefer linking Cursor’s Burp MCP rather than reinventing tools (mcp.md).

Verify

  1. Open Cursor Agent.
  2. Start a chat (title starts as General Chat until the first prompt or Agent title takes over).
  3. Send a short prompt (for example: Reply with: pong).
  4. You should see streaming text and a live status (Starting → Streaming → Ready).

If nothing starts, see troubleshooting.md.

Next