As of 2024–2025, Manifest V3 extensions have limited abilities to tamper with request bodies. Therefore, security professionals often use external proxy tools (like Burp Suite or OWASP ZAP) that route Chrome’s traffic. However, several pure Chrome extensions still exist for simpler tampering needs. Here are the most effective ways to intercept and modify Chrome traffic: 1. Chrome DevTools (Local Overrides & Request Blocking) While not a classic intercept-and-modify tool, DevTools allows you to alter JavaScript, CSS, and even fetch/XHR responses.
Use Chrome normally. Every matching request will be altered before leaving your browser. Use DevTools Network tab to confirm the change. Step-by-Step: Tamper Data Using Burp Suite (Professional Method) For full control including HTTPS, follow these steps:
Download and run Burp Suite Community Edition.
Install Requestly from the Chrome Web Store.
Save the rule and enable it.
In Burp, turn on "Intercept" (Intercept is on). Now every request from Chrome will stop in Burp.
A: Yes, but your proxy tool must support HTTPS interception with a trusted certificate. HSTS does not prevent proxying – only downgrade attacks.
Open Requestly dashboard and create a new "Modify Request" rule.