Skip to content
javascript anti-anti debugging
JavaScript HTML
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
crypto-js 1.0.0 Jan 7, 2020
LICENSE Initial commit Jan 7, 2020 [Mod] modify readme Jan 7, 2020 [Mod] modify readme Jan 7, 2020
babel.worker.js 1.0.0 Jan 7, 2020


English | 简体中文


This extension is an anti-anti-debugging framework

When I saw a beautiful piece of code, I found that an anti-debugging.


Having this plugin can solve the problem invisibly.

Main problem solving

  1. Console devtool detection
  2. PushState crash browser
  3. debugger crash browser and detects devtool
  4. regexp code style detection    

install and use


cd ~
git clone


1. Navigate to chrome://extensions in your browser. You can also access this page by clicking on the Chrome menu on the top right side of the Omnibox, hovering over   **More Tools** and selecting **Extensions**.  
2. Check the box next to **Developer Mode**.  
3. Click **Load Unpacked Extension** and select the directory for your "Hello Extensions" extension.



Find the extension on the right side of the address bar. Click Configure.

Shortcut Alt + Shift + D Enable request interception

Detailed explanation

Use console.log to determine whether to open the developer tools

//method 1
var x = document.createElement ('div');
Object.defineProperty (x, 'id', {
    get: function () {
        // developer tools are opened
console.log (x);
// Method 2
var c = new RegExp ("1");
c.toString = function () {
  // developer tools are opened
console.log (c);

Hook the console object directly to invalidate all output

Use the debugger statement to determine whether to open the developer tools and the infinite loop debugger crash machine

var startTime = new Date ();
var endTime = new Date ();
var isDev = endTime-startTime> 100;// developer tools are opened

while (true) {

// Another implementation of debugger
(function () {}). constructor ("debugger") ()

Static debugger Use the chrome protocol to intercept all requests, modify the return value.

Dynamic debugger Hooked Function.protype.constructor to replace all debugger characters

Regexp code format detection

new RegExp(`\\w+ *\\(\\) *{\\w+ *['|"].+['|"];? *}`).test((function(){return "dev"}).toString())

The current solution is to hook regexp when the apply function is triggered, the parameter is equal to the given value and return an empty regexp

chrome protocol

Approximate process

  1. chrome.debugger.attach injects the specified tabId
  2. Listen for chrome.debugger.onEvent to get the return value
  3. Send Fetch.enable to enable the request interceptor
  4. Modify the response in the event Fetch.requestPaused to return the result
  5. OK!     This feature uses chrome experimental features requires a new version of chrome

You can do more with the chrome protocol


If you encounter problems and suggestions during use, you can contact us with issuse;

If there are better ideas, you can get involved.

The project does not advocate cracking others' projects for profit. For academic research use only.

After all the code runs on the client. If it's valuable, just work hard. All can be broken.

It is recommended to put unimportant code on the client.


You can’t perform that action at this time.