Burpsuite Extension that lets you test LLMs with the Garak REST generator using the Burp UI

This version currently only generates the garak.json file from a Burpsuite request and response that can be used with the REST generator in Garak.

Uses the Burpsuite Montoya API to extend Burpsuite.

Uses the Garak REST Generator: https://reference.garak.ai/en/latest/garak.generators.rest.html

Load the extension into Burpsuite with the built JAR file. You also need to add org.json JAR file to Burpsuite.

In intercepted requests and repeater, there will be a context menu under extensions. You can use this context menu to send request-responses to the Garak extension tab in Burpsuite.

In the Garak extension tab, you can then export a garak.json file using the request-response you added.

garak --model_type rest -G /tmp/garak.json 

Builds are in the actions tab. Import the built Jar into Burp Extender

org.json:json

• Improve UI
  • Intruder-esque selection of relevant JSON field for Garak in request and response
• Run Garak from Burp
• Show Garak output in Burp
• Add Maven tests
• Publish to Burp extensions

The Java project is in

burp-garak
burp-garak/pom.xml

Used JDK 22