ZackSecurity / Zack-AI-Scanner
A Burp Suite extension that puts an LLM-driven vulnerability scan behind a right-click — or behind Proxy auto-scan (off by default), which turns parameterised proxy traffic into scan tasks. The model picks which parameters to attack and with what payloads; the payloads are really sent, and exploitability is decided from the evidence.
Why this job: says: vulnerability; topics: ai-security
What it does
DNS queries to a third-party service (dnslog.org) — that is how blind command injection, blind XXE, SSRF egress and the Log4j2 / Fastjson / Struts2 / Shiro classes are confirmed. Your own machine talks to that service too: once when the extension is loaded (a real round trip, run in the background to check the channel works) and again every time you press Test callback. If the engagement forbids either, turn it off on the Configuration tab — with it off nothing leaves your machine on load, and the cost is that those vulnerability classes can then only be recorded as *not judged*.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 43 days ago
- Stars
- 108
- +2 this week
- Licence
- GPL-3.0
- Share-alike terms
- Downloads for
- None listed
- No release files
- Latest version
- v3.0
- Released 43 days ago
- Built with
- Java
- 100% of the code
Is it looked after?
- Contributors
- Not stated
- Last 90 days
- Issues
- 100% closed
- 0 still open
- Pull requests
- 0 merged
- 0 waiting
- Releases
- 1
- 1 in the last year
- No contributing guide
- No security policy
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| vxcontrol / pentagi | 33,739 | 18 days ago | MIT | No downloads |
| s0ld13rr / pentestcode | 938 | 4 days ago | MIT | Mac, Linux |
| six2dez / burp-ai-agent | 1,577 | 19 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- Java 100%
Topics
- ai-security
- burp-suite
- llm
- penetration-testing
- security-testing
- vulnerability-scanner
Project record
- JobAI security
- StatusListed
- Commits1
- Forks18
- Watching1
- Stars in 28 days+11
- CreatedApr 13, 2026
- First seen by usNov 7, 2026
- CheckedNov 8, 2026