silentchainai/SILENTCHAIN

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

What it solves

SILENTCHAIN AI is a Burp Suite extension designed to replace traditional signature-based security scanners with AI-powered analysis. It identifies OWASP Top 10 vulnerabilities, security misconfigurations, and potential attack vectors in web applications by analyzing HTTP traffic without sending active requests to the target.

How it works

The extension integrates into Burp Suite's passive scan check system. It monitors in-scope HTTP traffic as it flows through the proxy and sends redacted summaries of requests and responses to a configured AI model (such as Burp AI, Ollama, OpenAI, Claude, or Gemini). The AI analyzes the traffic for patterns indicative of vulnerabilities like SQL injection, XSS, and broken access control, then generates findings with confidence scores, CWE/OWASP mappings, and remediation guidance.

Who it’s for

Security researchers, penetration testers, and web application security auditors who use Burp Suite Professional to automate the discovery of vulnerabilities during the reconnaissance and passive analysis phases of a security audit.

Highlights

  • Multi-AI Support: Compatible with local models via Ollama for privacy or cloud providers like OpenAI, Claude, and Gemini.
  • Data Privacy: Includes a built-in DataSanitizer that redacts credentials, API keys, PII, and session cookies before data is sent to AI providers.
  • Passive Analysis: Operates as a passive check, meaning it never sends requests to the target during automatic scanning.
  • Integrated Reporting: Findings are integrated directly into Burp's native issue dashboard and site map.
  • Context-Aware Detection: Uses LLMs to understand application logic and business context rather than relying on simple pattern matching.

Related

  • Project
    neuml/rag

    A Streamlit application backed by txtai that implements both Vector and Graph RAG to provide factually grounded LLM responses.

  • Project
    simonw/llm-gemini

    A plugin for the llm CLI tool that enables seamless access to Google's Gemini models, including support for multimodal inputs, Google Search grounding, code execution, and vector embeddings.

  • Project
    walidboulanouar/awesome-jev-use-cases

    An open-source, community-curated list of use cases, demos, and repositories built with Jev, TypeSafe's decision model. It includes popularity metrics, cost/latency reports, model limitations, and ideas, all in one place.

  • Project
    hikariming/openkoto

    An open-source, AI-powered language learning application that lets users study languages using real-world content like articles, books, and videos instead of fixed curricula.