Content
<h1 align="center">
<img src="icons/icon128.png" width="48" height="48" alt="logo" style="vertical-align: middle;">
AntiDebug_Breaker_mcp
</h1>
<p align="center">
<strong>🛡️ Front-end JavaScript Reverse Engineering & Penetration Testing Assistant Tool</strong>
</p>
<p align="center">
<a href="#-features">Features</a> •
<a href="#-installation">Installation</a> •
<a href="#-usage">Usage</a> •
<a href="#-mcp-prompts-and-cases">MCP Prompts</a> •
<a href="#-acknowledgments">Acknowledgments</a>
</p>
<p align="center">
<a href="https://github.com/0xsdeo/AntiDebug_Breaker"><img src="https://img.shields.io/badge/Original-AntiDebug__Breaker-orange?logo=github" alt="Original Project"></a>
<img src="https://img.shields.io/badge/Chrome-Extension-green?logo=googlechrome" alt="Chrome Extension">
<img src="https://img.shields.io/badge/Version-4.0.0-blue" alt="Version">
<img src="https://img.shields.io/badge/License-MIT-yellow" alt="License">
</p>
---
## 📖 Introduction
[](https://lobehub.com/mcp/0xsdeo-antidebug_breaker_mcp)
AntiDebug Breaker MCP is a Chrome browser extension designed for front-end JavaScript reverse engineering and penetration testing.
> 📢 **Disclaimer**: This project is based on the open-source project **[AntiDebug_Breaker](https://github.com/0xsdeo/AntiDebug_Breaker)** by [0xsdeo](https://github.com/0xsdeo), with added MCP integration. Thanks to the original author for their excellent work! 🙏
Developed based on the [Hook_JS](https://github.com/AntSwordProject/Hook_JS) library, providing powerful anti-debugging bypass, API Hook, Vue routing acquisition, and other features.
---
## ✨ Features
### 🔓 AntiDebug - Anti-debugging Bypass
Bypass various front-end anti-debugging mechanisms, making reverse analysis smoother.
| Script Name | Function Description |
|---------|---------|
| **Bypass Debugger** | Bypass infinite Debugger, covering eval, Function, Function.prototype.constructor |
| **hook log** | Prevent JS from rewriting console.log and other methods |
| **Hook table** | Bypass JS detection of running time difference anti-debugging |
| **hook clear** | Prohibit JS from clearing console data |
| **hook close** | Avoid website anti-debugging closing the current page |
| **hook history** | Avoid website anti-debugging returning to historical pages |
| **Fixed window size** | Fix browser window size, bypass console detection |
| **Hook CryptoJS** | Hook CryptoJS all symmetric/hash/HMAC algorithms |
| **Hook JSEncrypt RSA** | Hook JSEncrypt library's RSA encryption and decryption |
| **Page jump positioning** | Locate the JS code position of page jump |
### 🪝 Hook - API Interception
Intercept and monitor various browser API calls, quickly locate key code.
| Script Name | Function Description |
|---------|---------|
| **document.cookie** | Monitor Cookie setting operations |
| **XMLHttpRequest.setRequestHeader** | Monitor request header setting |
| **XMLHttpRequest.open** | Monitor XHR request initialization |
| **localStorage.setItem/getItem/removeItem/clear** | Monitor localStorage operations |
| **sessionStorage.setItem/getItem/removeItem/clear** | Monitor sessionStorage operations |
| **fetch** | Monitor fetch requests |
| **JSON.parse / JSON.stringify** | Monitor JSON parsing and serialization |
| **Promise** | Monitor Promise resolve, locate asynchronous callback |
| **Math.random** | Fix random number return value |
| **Date.now** | Fix timestamp return value |
**Hook Features:**
- 🔍 **Keyword filtering**: Only capture content containing specified keywords
- 🐛 **Debugger breakpoint**: Automatically trigger breakpoint when captured
- 📚 **Stack tracing**: Print complete call stack
### 🌐 Vue - Routing Analysis
Exclusive features for the Vue.js framework, quickly acquire and analyze routing information.
| Script Name | Function Description |
|---------|---------|
| **Get routing** | Get all loaded routes in Vue Router |
| **Clear jump** | Clear Vue Router's jump method |
| **Clear routing guard** | Clear beforeEach and beforeResolve guards |
| **Activate Vue Devtools** | Force activate Vue Devtools debugging tool |
**Vue Features:**
- 📋 **Routing list**: View all routes with one click, support search filtering
- 🔗 **Quick operation**: Copy routing, directly open page
- 📦 **Batch export**: Copy all paths or complete URLs with one click
- 🎯 **Custom pre-routing**: Flexibly configure routing prefix
### 📝 Headers - Request Header Management
Global request header injection function, similar to ModHeader extension, supports group management.
| Function | Description |
|------|------|
| **Request header grouping** | Create multiple request header groups, quickly switch between different environment configurations |
| **Global injection** | Automatically add request headers to all HTTP requests |
| **Enable/disable** | Individually control the enabled status of each request header |
| **MCP integration** | Manage request header configuration through AI tools |
**Usage scenarios:**
- 🔐 Add authentication Token (Authorization, X-Token, etc.)
- 🏢 Switch tenant ID (tenant-id)
- 🧪 Test request header configuration in different environments
- 🔧 Debug API interface
### 🤖 MCP - AI Integration
🔗 Support Model Context Protocol (MCP), can directly control the browser through Cursor AI.
**MCP Features:**
- 🔌 Seamlessly integrate with Cursor AI / Claude / Trae and other editors
- 🌍 Global operation mode: match and operate any tab page through page title
- 🛠️ 60+ dedicated tools: page analysis, network monitoring, encryption capture, request header management, etc.
---
## 📥 Installation
Choose the corresponding installation tutorial based on the AI editor you use:
| Editor | Tutorial Link | Recommended Index | Description |
|--------|----------|:--------:|------|
| **Cursor** | [📖 Cursor Installation Tutorial](./cursor安装教程.md) | ⭐⭐⭐⭐⭐ | Many model options |
| **Qoder** | [📖 Qoder Installation Tutorial](./qoder安装教程.md) | ⭐⭐⭐⭐ | Lightweight, high cost-performance |
| **Trae** | [📖 Trae Installation Tutorial](./trae安装教程.md) | ⭐⭐⭐⭐ | ByteDance product, free and available domestically |
> 💡 **Selection suggestion:** Choose Cursor for complete features, Qoder for cost-effectiveness, and Trae for free domestic use
>
> 📦 **Quick download:** [Releases](https://github.com/vs-olitus/AntiDebug_Breaker_mcp/releases)
---
## 📖 Usage
### ⚡ Basic Operation
1. **Enable script**: Click the switch button of the corresponding script
2. **Refresh page**: Script takes effect after refreshing the target page
3. **View results**: Open F12 console to view Hook output
### 🔄 Mode Switching
- **Standard mode** (default): Script only injects into the current website
- **Global mode**: Script injects into all websites
> ⚠️ For `file://` protocol or `localhost` pages, global mode must be enabled
### 🪝 Hook Section Usage
1. **Basic usage**: After enabling the script, all related operations will be printed to the console
2. **Keyword filtering**: Enable "Retrieve keywords", add keywords to capture only matching content
3. **Breakpoint debugging**: Enable `debugger` button, automatically break point when captured
4. **Stack tracing**: Enable `stack` button, print complete call stack
### 🌐 Vue Routing Acquisition
1. Enable "Get routing" script
2. Refresh target Vue website
3. Return to the plugin to view the "Routing list" tab page
4. Click "Copy" or "Open" to operate routing
### 📝 Request Header Management
1. Click the "Headers" menu on the left to enter request header management
2. Click "New group" to create a request header group
3. Add request headers (name and value) in the group
4. Click the "Enable" button on the right of the group to activate the request header
5. All HTTP requests will automatically carry enabled request headers
**Usage tips:**
- 🔄 **Quick switching**: Create multiple groups (e.g., "Development environment", "Test environment"), switch with one click
- ✅ **Individual control**: Each request header can be individually enabled/disabled
- 🤖 **MCP management**: Quickly configure request headers through AI tools
---
## 🤖 MCP Prompts and Cases
### 💬 Common Prompts
> 📝 **Usage instructions:** Replace `{website title}` with the actual title of the target website
#### 🔍 One-click Page Analysis
```
Please help me call AntiDebug_Breaker_mcp to analyze the {website title} page, detect anti-debugging mechanisms, front-end framework, encryption methods, and authentication mechanisms
```
#### 🔐 Encryption Algorithm Reverse Engineering
```
Please help me call AntiDebug_Breaker_mcp to analyze {website title}
Input content "Hello" will trigger API interface:
https://xxxx.com/translate/key?mysticTime=xxx&token=xxx&sign=xxx
Help me restore the encryption algorithm of sign and perform packet verification
```
#### 🔥 Comprehensive Penetration Testing
```
Please help me call AntiDebug_Breaker_mcp to perform a complete front-end security analysis on {website title}:
1. Detect and bypass anti-debugging
2. Get all Vue routes
3. Batch access routes to collect APIs
4. Scan sensitive data leakage
5. Analyze encryption and authentication mechanisms
```
#### 🛡️ Background System Testing
```
Please help me call AntiDebug_Breaker_mcp to test the front-end security of the background system of {website title}:
1. Get all routes
2. Detect unauthorized access
3. Scan sensitive information leakage
4. Analyze interface signature
```
---
### 📚 Practical Cases
> 🚧 **Cases are being organized, please stay tuned...**
---
## ⚠️ Precautions
| ⚠️ | Description |
|---|------|
| 🦊 | This plugin currently **does not support Firefox browser** |
| 🔄 | After enabling/disabling the script, **refresh the page** to take effect |
| 📍 | This plugin **cannot automatically add** unloaded Vue routes |
| 🗑️ | When updating the plugin, please **remove the old version** and then import the new version |
---
## 🙏 Acknowledgments
### 🌟 Original Project
This project is based on the following open-source projects for secondary development:
| Project | Link | Description |
|-----|------|------|
| **AntiDebug_Breaker** | [https://github.com/0xsdeo/AntiDebug_Breaker](https://github.com/0xsdeo/AntiDebug_Breaker) | Original JS reverse engineering tool |
### 👥 Contributors
Thanks to the following contributors:
- [0xsdeo](https://github.com/0xsdeo) - Original author
- [CC11001100](https://github.com/CC11001100)
- [Dexter](https://github.com/mingheyan)]
- [d1sbb](https://github.com/d1sbb)
- [Yosan](https://github.com/lyousan)
### 📚 Referenced Projects
| Project | Link |
|-----|------|
| VueCrack | [https://github.com/AntSwordProject/VueCrack](https://github.com/AntSwordProject/VueCrack) |
| FakeCryptoJS | [https://github.com/AntSwordProject/FakeCryptoJS](https://github.com/AntSwordProject/FakeCryptoJS) |
| vue-force-dev | [https://github.com/AntSwordProject/vue-force-dev](https://github.com/AntSwordProject/vue-force-dev) |
| Hook_JS | [https://github.com/AntSwordProject/Hook_JS](https://github.com/AntSwordProject/Hook_JS) |
| ModHeader - Modify HTTP headers | [https://chromewebstore.google.com/detail/idgpnmonknjnojddfkpgkljpfnnfcklj](https://chromewebstore.google.com/detail/idgpnmonknjnojddfkpgkljpfnnfcklj) |
---
## 📬 Original Author Contact Information
- **Original project Issues**: [https://github.com/0xsdeo/AntiDebug_Breaker/issues](https://github.com/0xsdeo/AntiDebug_Breaker/issues)
- **Original author public account**: Spade sec
- **Original author WeChat**: I-0xsdeo
---
<p align="center">
<sub>⭐ If this project helps you, please give the <a href="https://github.com/0xsdeo/AntiDebug_Breaker">original project</a> a Star!</sub>
</p>
