0xdevalias/go-burp-rest — explained in plain English
Analysis updated 2026-07-29 · repo last pushed 2018-03-16
Automate Burp Suite security scans from Go code without manually writing HTTP requests.
Build a security testing pipeline that triggers Burp scans and collects results programmatically.
Check Burp Suite version and status as part of an automated testing workflow in Go.
| 0xdevalias/go-burp-rest | demomanito/helper | emersion/minilustre | |
|---|---|---|---|
| Stars | 7 | 7 | 7 |
| Language | Go | Go | Go |
| Last pushed | 2018-03-16 | 2023-03-07 | 2019-01-07 |
| Maintenance | Dormant | Dormant | Dormant |
| Setup difficulty | moderate | easy | moderate |
| Complexity | 2/5 | 1/5 | 4/5 |
| Audience | developer | general | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires a running Burp Suite instance with the burp-rest-api extension installed and accessible over the network.
go-burp-rest is a Go library that lets programs talk to Burp Suite programmatically. Burp Suite is a popular security testing tool used to find vulnerabilities in web applications, and the burp-rest-api extension (built by VMware) exposes Burp's features through a web interface. This library gives Go developers a clean way to interact with that interface without writing raw HTTP requests themselves. The author created it as an alternative to the code automatically generated by swagger-codegen, a tool that builds API clients from specification files. They found that generated code unwieldy and wrote this library by hand instead. The code sets up a client pointed at wherever your Burp API is running, then provides methods to call various Burp functions. For example, you can ask it for the running Burp version, and it returns that information in a structured Go format ready to use in your code. This would appeal to security engineers or developers building automated security testing pipelines. If you're running Burp scans as part of your development process and writing your automation tooling in Go, this library saves you from manually constructing HTTP requests and parsing responses. The sample usage shows checking the Burp version, but the broader use case is orchestrating scans and pulling results programmatically. The README is upfront about limitations: the author calls out some "hacky bits" in the helper code and notes that testing is incomplete. Several improvements are planned, including configuration endpoints and a command-line tool, but these aren't implemented yet. The author also points to a companion project for running the Burp API in Docker, which would be useful for setting up the server side this client connects to.
A Go library for programmatically controlling Burp Suite, a popular web app security testing tool, through its REST API so you can automate security scans from Go code.
Mainly Go. The stack also includes Go, Burp Suite REST API.
Dormant — no commits in 2+ years (last push 2018-03-16).
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Verify against the repo before relying on details.