High-risk tools in Js Reverse
39 of the 93 tools in Js Reverse are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
add_network_ruleExecuteAdds a network interception rule (replaces the old intercept_requests).
-
api_requestExecuteMake an HTTP request from the browser context. Supports custom method, headers, body, and automatic token injection. The request is executed inside the browser page using fetch(...
-
batch_replayExecuteReplays multiple requests in sequence and summarises each response.
-
break_on_attribute_modifiedExecuteSets a breakpoint that triggers when any attribute of an element is modified. Useful for tracking hidden field changes, class modifications, etc.
-
break_on_node_removedExecuteSets a breakpoint that triggers when an element is about to be removed from the DOM.
-
break_on_subtree_modifiedExecuteSets a breakpoint that triggers when the DOM subtree of an element is modified (child added/removed). Useful for tracking dynamic content changes.
-
break_on_xhrExecuteSets a breakpoint that triggers when an XHR/Fetch request URL contains the specified string.
-
encode_protobufExecuteEncode data to protobuf binary format without a .proto schema. Specify field numbers, types, and values to build a protobuf message. Returns hex and base64 encoded output.
-
evaluate_on_callframeExecuteEvaluates a JavaScript expression in the context of a specific call frame while paused. This allows you to inspect variables and execute code in the paused scope.
-
evaluate_scriptExecuteEvaluate a JavaScript function inside the currently selected page. Returns the response as JSON so returned values have to JSON-serializable.
-
hook_crypto_functionsExecuteAutomatically hooks common crypto library functions to log encryption/decryption calls. Supports CryptoJS, JSEncrypt, Web Crypto API, and more.
-
hook_functionExecuteHooks a JavaScript function to log its calls, arguments, and return values. Useful for understanding how functions are used without setting breakpoints.
-
monitor_eventsExecuteMonitors DOM events on a specified element or window. Events will be logged to console.
-
monitor_eventsourceExecuteStarts capturing Server-Sent Events (EventSource) messages via CDP.
-
monitor_form_submitExecuteMonitors form submissions to capture form data before it is sent. Useful for analyzing login forms and finding encryption of passwords.
-
monitor_input_changesExecuteMonitors changes to input fields in real-time. Captures every keystroke and value change. Useful for tracking password field modifications before encryption.
-
navigate_pageExecuteNavigates the currently selected page to a URL.
-
new_pageExecuteCreates a new page
-
pauseExecutePauses JavaScript execution at the current point. Use this to interrupt running code.
-
replay_requestExecuteRe-sends a captured request (by numeric id from search_network) from the
-
resumeExecuteResumes JavaScript execution after being paused at a breakpoint. Execution continues until the next breakpoint or completion.
-
set_breakpointExecuteSets a breakpoint in a JavaScript file at the specified line. The breakpoint will trigger when the code executes.
-
set_breakpoint_on_textExecuteSets a breakpoint on specific code (function name, statement, etc.) by searching for it and automatically determining the exact position. Works with both normal and minified files.
-
set_cache_disabledExecuteToggles the browser cache for the page via CDP Network.setCacheDisabled.
-
set_extra_headersExecuteSets extra HTTP headers sent with every subsequent request (CDP
-
set_network_conditionsExecuteEmulates network conditions (offline, throttling, latency) and optionally
-
start_js_coverageExecuteStarts collecting JavaScript code coverage data. This tracks which parts of JavaScript code are executed.
-
step_intoExecuteSteps into the next function call. Use this to enter and debug function bodies.
-
step_outExecuteSteps out of the current function, continuing until the function returns. Use this to quickly exit a function.
-
step_overExecuteSteps over to the next statement, treating function calls as a single step. Use this to move through code without entering function bodies.
-
stop_eventsource_monitorExecuteStops capturing EventSource messages. Captured data is retained.
-
stop_form_monitorExecuteStops monitoring form submissions.
-
stop_input_monitorExecuteStops monitoring input field changes.
-
stop_monitorExecuteStops an event monitor.
-
stop_websocket_monitorExecuteStops capturing WebSocket frames. Captured frames are retained.
-
trace_functionExecuteTraces calls to a function by its name in the source code. Works for ANY function including module-internal functions (webpack/rollup bundled). Uses
-
wait_for_requestExecuteBlocks until a network request matching the filters is observed (across
-
wait_for_responseExecuteBlocks until a network request matching the filters has received a
-
watch_globalExecuteWatches a global variable for changes. When the variable is modified, logs the old and new values to console.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.