Request Maker Remake

A web request logger and editor for penetration testers, bug bounty hunters, and web developers.

---

This project is a continuation of the Request Maker extension originally made by Juho Nurminen, rebuilt from the ground up for Manifest V3 with many new features.

Note: This project is still under active development. Some features may change between versions.

---

Features

• Request Logger — Captures XHR, Fetch, WebSocket, and Form requests automatically
• Request Editor — Replay and modify captured requests via the built-in Request Maker tab
• Response Viewer — Inline Raw / Decoded / JSON toggle with line numbers
• Response Headers Viewer — Inline line-numbered view of all response headers
• Document Tab — Renders HTML responses in a sandboxed iframe with page title, favicon, and optional JavaScript execution
• Response Capture — Logs HTTP status code, response size, and content type per request
• Inline Detail Panel — Click any logged request to expand full headers and body details
• Bulk Actions — Select multiple requests to delete or export at once
• Filter Presets — Save and load named filter combinations (type/method/URL keyword)
• Export — Export logs as JSON, HAR-compatible format, Postman Collection v2.1, or CSV
• Import — Import requests from JSON or HAR files
• Environment Variables — Define {{name}} variables used across URL and headers
• Request Bookmarks — Save and reload frequently used request configurations
• Repeat / Stress Test — Send a request N times with a configurable delay
• Link Blacklist — Block request logging per domain or path; supports exclusion rules (#domain.com/path)
• File Blacklist — Block request logging by file extension (e.g. jpg, png, js, css, woff)
• Dark Mode — Toggle via the settings panel
• WebSocket Frame Viewer — Inspect individual WS frames sent and received
• WebSocket Connect — Directly open a WebSocket connection from the Request Maker editor; method badge switches to WS, Send button becomes Connect / Disconnect, frames appear live in the WS Frames tab

---

Installation

1. Clone or download ZIP of this repository
2. If downloaded as ZIP, extract it
3. Open Chrome, Brave, or any Chromium-based browser
4. Navigate to chrome://extensions and enable Developer mode
5. Click Load unpacked and select the repository folder

---

Usage

After installation, browse any website. The extension icon will show a badge count of captured requests. Click the icon to open the popup log. From there you can:

• Click a row to expand request/response details
• Use Open RM to open the full Request Maker editor for a selected request
• Use the filter bar to search by type, method, or URL keyword
• Save filters as presets for quick reuse
• Export logs in multiple formats

---

Screenshot / Preview

---

Changelog

v0.3.0.2 — 2026-04-01 - 2026-##-##

• Added Support WebSocket Connect in rm.html — type a wss:// or ws:// URL and the interface switches to WS mode
• Fixed WS Send cross-world boundary bug — CustomEvent.detail is null across Chrome's content-script / page-world boundary; replaced with window.postMessage in both injector.js and catcher.js
• Fixed absolutify() in injector.js — wss:// and ws:// URLs were incorrectly treated as relative paths; regex updated to /^(https?|wss?):///
• Removed URL grouping — all captured requests now render as individual flat rows
• Fixed popup horizontal scrollbar appearing when detail row is open
• Fixed detail panel URL text cut off — now wraps to next line
• Fixed blacklist bars — merged into one row (left: link, right: ext)
• Fixed table header — now sticky when scrolling down

v0.3.0.1 — 2026-04-01

• Added File Blacklist — block request logging by file extension (jpg, png, js, css, etc.) with chip-based UI
• Added line numbers to Response Headers and Source Code response viewer
• Replaced Response Headers iframe with inline <pre> viewer — no longer requires view-source iframe
• Replaced Source Code iframe with inline <pre> viewer with Raw / Decoded / JSON toggle buttons
• Added favicon display next to page title in the Document tab
• Fixed chrome://favicon/ → chrome-extension://<id>/_favicon/ for Manifest V3 compatibility
• Fixed Allow JavaScript checkbox — now correctly reloads iframe with proper sandbox flags (allow-scripts allow-same-origin allow-forms allow-popups allow-modals)
• Added request capture from Document tab iframe — XHR/Fetch/WebSocket requests made by rendered pages are now logged
• Fixed blacklist race condition on service worker restart (Promise-based _blacklistReady)
• Fixed real-time popup capture bypassing blacklist checks
• Fixed FormData and ArrayBuffer body capture in catcher.js
• Removed unused view-source/ folder dependencies
• Added "favicon" permission to manifest.json

v0.3.0.0 — 2026-03-29

• Added response capture (status code, size, content type) per request
• Added inline detail panel, bulk actions, and filter presets in the popup log
• Added export to Postman Collection v2.1 and CSV
• Added environment variables ({{name}} syntax) and request bookmarks in the editor
• Added repeat/stress test feature (N requests with configurable delay)
• Added path matching and exclusion rules (#) to Link Blacklist (renamed from Domain Blacklist)
• Fixed race condition crash in background.js on tab removal
• Various UI improvements: status dot, size column, consolidated action buttons, footer with version

---

Copyright © ANUBISKUN