v2.0 — Chrome Extension Manifest V3

Reverse Engineer
Any Web API

Deep API intelligence for developers, security researchers, and automation engineers. Capture, analyze, and replay any web application's network behavior.

View on GitHub Quick Install

wiresuite — captured requests

●CAPTURE ACTIVE listening on all tabs...

POST https://api.example.com/graphql

├─ operation: createUser

├─ type: mutation

├─ status: 200 OK

└─ replay: python, typescript, curl, n8n, workers

GET https://api.example.com/users/me

├─ tokens: 2 dynamic [DYNAMIC]

└─ action: click #profile-btn

Features

Everything you need to
understand any API

From GraphQL detection to automatic code generation, WireTapSuite gives you superpowers.

🔍

GraphQL Detection

Automatically identifies GraphQL endpoints, extracts operation names, doc_ids, variables, and classifies queries vs mutations.

⚡

Mutation Highlighting

Write operations are visually highlighted with orange badges so you can instantly spot data-changing requests.

🔄

8-Format Replay

Generate production-ready code for cURL, Python, TypeScript, Axios, Fetch, n8n, Cloudflare Workers, and Next.js.

🎯

Action Correlation

Track clicks, form submits, and keyboard events that trigger each API request. Understand what causes what.

📊

Timeline View

Visual timeline showing the chronological sequence of user actions and network requests with time deltas.

🗂️

Schema Extraction

Build an API schema from captured GraphQL operations with variable shapes and sample payloads.

🔓

Token Sanitization

Auto-detects CSRF, session IDs, bearer tokens and marks them as [DYNAMIC] in replay bundles.

📡

CDP Deep Capture

Chrome DevTools Protocol integration for capturing response bodies that content scripts can't access.

🧬

Deep Extract

Recursively flatten complex JSON into structured, searchable data with path, type, and value for every field.

Replay Engine

One click.
8 formats. Production ready.

Capture any request and instantly generate ready-to-use code with automatic CSRF token refresh, XSSI prefix stripping, and platform-specific optimizations.

Python

TypeScript

cURL

n8n

Workers

Next.js

          # Python replay with auto CSRF refresh

          import requests, re

          session = requests.Session()

          # Auto-fetch fresh CSRF token

          resp = session.get("https://target.com")

          csrf = re.findall(r'csrf_token.*?value="(.*?)"', resp.text)[0]

          # Replay the captured request

          resp = session.post("https://target.com/api/graphql",

            headers={"x-csrf-token": csrf},

            json={

              "operationName": "createUser",

              "variables": {"name": "John"},

              "query": "mutation createUser..."

            })

          print(resp.status_code)  # 200

Platform Support

Built-in token handling
for major platforms

WireTapSuite recognizes and auto-refreshes CSRF tokens for Facebook, Instagram, LinkedIn, YouTube, and generic Django/ASP.NET apps.

Facebook / Meta	`fb_dtsg, lsd, jazoest`
Instagram	`sessionid, csrftoken`
LinkedIn	`JSESSIONID, Csrf-Token`
YouTube / Google	`SAPISIDHASH`
Django / ASP.NET	`csrf_token, XSRF-TOKEN`

          // TypeScript replay with SAPISIDHASH

          import { createHash } from 'crypto';

          const generateHash = (

            timestamp: number,

            sapisid: string,

            origin: string

          ) => {

            const input = `${timestamp} ${sapisid} ${origin}`;

            return createHash('sha1')

              .update(input).digest('hex');

          };

          const ts = Math.floor(Date.now() / 1000);

          const hash = generateHash(ts, sapisid, origin);

          // Ready to replay

          headers['Authorization'] = 

            `SAPISIDHASH ${ts}_${hash}`;

Get Started

Install in 30 seconds

Load unpacked in Chrome Developer Mode and start capturing.

Clone the repo

Download or clone the repository to your machine.

git clone https://github.com/muzahirabbas/WireTapSuite.git

Open Chrome Extensions

Navigate to chrome://extensions and enable Developer mode.

chrome://extensions/

Load Unpacked

Click "Load unpacked" and select the WireTapSuite folder.

Load unpacked → Select folder

Comparison

How it stacks up

WireTapSuite vs traditional tools. See why developers are switching.

Feature	WireTapSuite	Chrome DevTools	Postman	Burp Suite
GraphQL Detection	✓	✗	◐	◐
Mutation Highlighting	✓	✗	✗	✗
Action Correlation	✓	✗	✗	✗
Timeline View	✓	✗	✗	✗
Schema Extraction	✓	✗	◐	◐
8-Format Replay	✓	✗	◐	◐
Auto Token Sanitization	✓	✗	✗	◐
CSRF Auto-Refresh	✓	✗	✗	✗
Deep Extract	✓	✗	✗	✗
Image Scraping	✓	✗	✗	✗
CDP Deep Capture	✓	✓	✗	✓
Free	✓	✓	◐	✗
Local Privacy	✓	✓	✗	◐

Replay Formats

Platform Token Handlers

Core Features

Data Leaves Your Browser

Roadmap

What's coming next

WireTapSuite is actively developed. Here's what's on the horizon.

Phase 11

WebSocket Inspector In Progress

Real-time WebSocket message capture, filtering, replay, and binary message decoding.

Phase 12

Request Builder Planned

Visual request editor with environment variables, collections, and pre-request scripts.

Phase 13

Response Post-Processing Planned

JSONPath/XPath extractor, response transformers, chained requests, and assertion testing.

Phase 14

Collaboration Planned

Export/import collections, share snippets via URL, team workspace with cloud sync.

Phase 15

Advanced Automation Planned

Visual workflow builder with conditional logic, loops, error handling, and scheduled execution.

Phase 18

AI Assistance Planned

Auto-generate documentation, suggest replay formats, detect API patterns, natural language search.

Reverse EngineerAny Web API

Everything you need tounderstand any API