A powerful Chrome extension to bypass common anti-debugging scripts and DevTools traps.
Anti-Debugger Bypass is a lightweight Google Chrome extension designed to neutralize common client-side JavaScript anti-debugging techniques. By injecting a script at document_start, this extension intercepts and neutralizes traps designed to crash or halt your browser's Developer Tools (DevTools).
Whether you're a security researcher, a penetration tester, or just trying to inspect elements without being interrupted by infinite debugger statements, this extension ensures a smooth debugging experience.
- 🛑 Eval Debugger Block: Intercepts and neutralizes
eval("debugger"). - 🛡️ Safe Function Constructor: Patches
window.Functionto preventFunction("debugger")()calls cleanly across multiple layers. - ⏱️ SetInterval Protection: Blocks malicious loops using
setIntervalthat executedebuggeroreval. - 🔗 Redirect Prevention: Prevents aggressive anti-debug scripts from redirecting
location.hrefaway from the current page. - 📴 Console Tamper Protection: Temporarily disables console output clearing (
console.clear) and timing checks during page load, restoring them automatically afterward. - 🔐 CSP Enforcement: Uses a Content-Security-Policy meta tag to help neutralize inline
evalpayloads.
Since this extension is not currently on the Chrome Web Store, you can easily install it manually (Unpacked Extension):
- Clone or Download the repository:
git clone https://github.com/mingnhat99/anti-debugger.git
- Open Google Chrome and navigate to
chrome://extensions/. - Enable Developer mode using the toggle switch in the top right corner.
- Click on the Load unpacked button in the top left.
- Select the
anti-debuggerdirectory you just cloned/downloaded. - The extension is now installed and active! 🎉
Once installed and enabled, the extension runs automatically on all web pages (<all_urls>).
- Simply open Chrome Developer Tools (
F12orCtrl+Shift+I/Cmd+Option+I). - Navigate to a site with anti-debugging protections.
- The extension seamlessly patches global functions in the
MAINexecution world before scripts load. - Check your console. You should see the message:
[bypass] DevTools protection disabled. Console restored.after the page is fully loaded.
This tool is created for educational and security research purposes only. Do not use it to violate the terms of service of websites or for malicious activities. The developers assume no liability and are not responsible for any misuse or damage caused by this program.
Contributions, issues, and feature requests are welcome!
- Fork the Project
- Create your Feature Branch (
git checkout -b feature/AmazingFeature) - Commit your Changes (
git commit -m 'Add some AmazingFeature') - Push to the Branch (
git push origin feature/AmazingFeature) - Open a Pull Request
If you like this project, please consider giving it a ⭐️!
Distributed under the MIT License. See LICENSE for more information.