Tamper Dev

Tamper Dev插件简介

Tamper Dev插件描述

If you are a developer, you can use Tamper Dev to debug your websites,  if you are a pentester, you can use it to search f security vulnerabilities by inspecting the HTTP traffic from your browser.

Unlike most other extensions, Tamper Dev allows you to intercept, inspect  modify the requests befe they are sent to the server,  befe they are sent back to the browser interactively,  without any additional installed software.


How to use?
  1. Press [ Alt ⌥ ] + [ T ]  click on the extension button
  2. Filter the requests you are interested in
  3. Enable interception,  trigger a new request
  4. Modify all requests befe they are sent to the server
  5. Modify the responses befe they are sent back to the browser


Need Help?
  There is an FAQ at https://tamper.dev/  you can visit https://github.com/google/tamperchrome/discussions f asking questions directly to the developers.


Want to contribute?
  Tamper Dev is Free  Open Source Software. Visit https://github.com/google/tamperchrome to learn how you can contribute.


About Tamper Dev:
  This is the new version of the extension previously called Tamper Chrome, but now suppts multiple browsers,  does not require an auxiliary app. This extension provides functionality similar to Burp Proxy, MITM Proxy, OWASP ZAP, Tamper Data,  Postman Proxy Intercept, but without the need of additional software, with full suppt of HTTPS connections,  trivial to setup (just install).
                                

Tamper Dev插件离线安装方法

1.首先用户点击谷歌浏览器右上角的自定义及控制按钮，在下拉框中选择设置。

2.在打开的谷歌浏览器的扩展管理器最左侧选择扩展程序或直接输入：chrome://extensions/

3.找到自己已经下载好的Chrome离线安装文件xxx.crx，然后将其从资源管理器中拖动到Chrome的扩展管理界面中，这时候用户会发现在扩展管理器的中央部分中会多出一个”拖动以安装“的插件按钮。

4.下载 Tamper DevChrome插件v2.0.9版本到本地。

5.勾选开发者模式，点击加载已解压的扩展程序，将文件夹选择即可安装插件。

注意：最新版本的chrome浏览器直接拖放安装时会出现“程序包无效CRX-HEADER-INVALID”的报错信息，参照这篇文章即可解决