Wirebrowser is a CDP-based runtime instrumentation platform for the browser. Think Frida, but for JavaScript running in Chrome — without monkeypatching.
Joined November 2025
- Tweets26
- Following4
- Followers165
- Likes5
Stop stepping manually.
Skip execution until a condition flips and jump exactly where it happens:
🔥 loggedIn became true → line X
(no monkeypatching, just CDP)
Most JavaScript functions aren’t accessible from window.
You can still hook them, follow their return, and flip application state at runtime.
You can hook JavaScript functions at runtime (even inside closures) without monkeypatching.
Wirebrowser v0.6.1
Frida-style instrumentation for the browser:
onEnter / onLeave handlers, return control.
Some data used to generate network requests only exists in runtime memory.
Wirebrowser → Heap Snapshot → search
Trace → Hook → Control
Wirebrowser v0.5.0 - Live Hooks:
• Identify the function via Origin Trace
• Hook it live
• Override return values
• Inject arbitrary code
Runtime instrumentation powered by CDP.
Wirebrowser 0.4.0 is out.
Request workflow improvements, Origin Trace fixes, and better stability.
macOS builds are now signed & notarised.
Landing page is live → wirebrowser.dev
From network interception to API collection.
Even heavy debuggers need to relax 😉
Wirebrowser isn’t just advanced tooling — it’s a complete workflow for everyday debugging tasks.
Wirebrowser 0.3.0 dev builds ✅
Cross-platform Electron builds
Custom Chrome management
Unsigned binaries for now.
Signed release coming next.
Network → Memory → DevTools
Rewrite a response → see the UI change → grab the JS object born from that response directly in the live heap → inspect/patch it from DevTools.
No instrumentation.
Just CDP.
DevTools lets you inspect and edit objects —
but only if you already know where they are.🔍
Wirebrowser’s Live Object Search scans the JS heap in realtime, finds the exact runtime object, and lets you (monkey)patch it. 🐒⚙️
BDHS + Live Search = origin + runtime control.🧩
New in Wirebrowser: Breakpoint-Driven Heap Search (BDHS) — step-out debugging + temporal heap snapshots to identify the user-land function where a JavaScript value is created, even across async boundaries.
Writeup: fcavallarin.github.io/wirebr…
👀 Just launched Wirebrowser — a desktop app for intercepting & rewriting HTTP traffic *inside the browser* via the Chrome DevTools Protocol
Also supports:
🧠 Inspect JS heap + runtime objects
📂 API collections (Postman-style)
github.com/fcavallarin/wireb…
#CyberSecurity #DevTools