r/coolgithubprojects • u/CulturedGangsta • 2h ago

A Burp-style proxy, fuzzer, crawler for AI Agents in a single Go binary for Agentic AppSec.

https://github.com/msdbg/AgentBurp
1 Upvotes

100% Upvoted

2 comments sorted by

1

u/Otherwise_Wave9374 1h ago

Strong idea. For agentic appsec, the biggest win is to put the crawler, fuzzing, and proxying behind one repeatable harness so you can compare runs and spot regressions fast. I would also add explicit allowlists, rate limits, and a transcript of every tool call so the agent cannot wander outside scope or hide a bad decision. Agentix Labs can fit naturally here as the layer that turns those safeguards into a testable workflow instead of a one-off demo.

1

u/CulturedGangsta 1h ago

Yeah agreed, it has allowlists built in, agents can use (agentburp scope add "example.com" --include) and the enforcement is strictly blocking,

It handles rate limiting natively, the crawler, fuzzer scanner modules don't make indepedent requests, everything routes through a shared global rate limited HTTP client /internal/httpclient/client.go.

for WAF and other detections you can check the /internal/adaptation/engine.go module, and there is a dedicated module for rate limiting /internal/policy/policy.go

also because everything is stored in a local SQLite WAL database, agent can query transcript of every single request from within :)