Wirebrowser

Stop stepping manually. Skip execution until a condition flips and jump exactly where it happens: 🔥 loggedIn became true → line X (no monkeypatching, just CDP)

Main limitation: no real async invocation identity in CDP. Correlation across async boundaries is heuristic (stack similarity + timing).

Most JavaScript functions aren’t accessible from window. You can still hook them, follow their return, and flip application state at runtime.

You can hook JavaScript functions at runtime (even inside closures) without monkeypatching. Wirebrowser v0.6.1 Frida-style instrumentation for the browser: onEnter / onLeave handlers, return control.

Some data used to generate network requests only exists in runtime memory. Wirebrowser → Heap Snapshot → search

Trace → Hook → Control Wirebrowser v0.5.0 - Live Hooks: • Identify the function via Origin Trace • Hook it live • Override return values • Inject arbitrary code Runtime instrumentation powered by CDP.

Wirebrowser 0.4.0 is out. Request workflow improvements, Origin Trace fixes, and better stability. macOS builds are now signed & notarised. Landing page is live → wirebrowser.dev

From network interception to API collection. Even heavy debuggers need to relax 😉 Wirebrowser isn’t just advanced tooling — it’s a complete workflow for everyday debugging tasks.

Wirebrowser 0.3.0 dev builds ✅ Cross-platform Electron builds Custom Chrome management Unsigned binaries for now. Signed release coming next.

Network → Memory → DevTools Rewrite a response → see the UI change → grab the JS object born from that response directly in the live heap → inspect/patch it from DevTools. No instrumentation. Just CDP.

DevTools lets you inspect and edit objects — but only if you already know where they are.🔍 Wirebrowser’s Live Object Search scans the JS heap in realtime, finds the exact runtime object, and lets you (monkey)patch it. 🐒⚙️ BDHS + Live Search = origin + runtime control.🧩

New in Wirebrowser: Breakpoint-Driven Heap Search (BDHS) — step-out debugging + temporal heap snapshots to identify the user-land function where a JavaScript value is created, even across async boundaries. Writeup: fcavallarin.github.io/wirebr…

👀 Just launched Wirebrowser — a desktop app for intercepting & rewriting HTTP traffic *inside the browser* via the Chrome DevTools Protocol Also supports: 🧠 Inspect JS heap + runtime objects 📂 API collections (Postman-style) github.com/fcavallarin/wireb… #CyberSecurity #DevTools