⚡ Windows 10/11 · x64

HTTP/S Traffic
Interception Suite

Stealth Bridge sits between your browser and the web — capturing, inspecting, and modifying every request and response in real time. Built for security researchers and advanced testers.

↓ Download Setup Explore Features →
100+
Built-in Rules
3DS
Bypass Support
Live
Rule Dashboard
0ms
Setup Time
Stealth Bridge — Dashboard · localhost:8420
09:14:02 ✔ HIT cvv-form-remove POST https://checkout.example.com/order
09:14:02 ✔ HIT 3ds-threeds-resp body transStatus A → Y
09:14:03 ✔ HIT otp-bypass-remove body otpRequired → false
09:14:04 ⚠ MISS cvv-json-remove body empty — pattern not found
09:14:05 ✔ HIT airqatar-resp POST https://book.qatarairways.com/payment
Features

Everything you need
to intercept & modify traffic

A complete toolkit for analyzing and manipulating web traffic — from raw request editing to automated rule chains.

🔀
Match & Replace Engine
Apply regex or plain-text rules to any part of a request or response — URL, headers, body (JSON, form-encoded, XML, or raw text). Chained rules run in priority order with full hit/miss diagnostics.
🔒
3DS / Payment Bypass
Built-in support for bypassing 3D Secure challenges across major processors: Stripe, Checkout.com, WorldPay, Braintree, Adyen, Cybersource, Cardinal Commerce and more.
💳
CVV & OTP Removal
Strip CVV fields from request bodies (JSON or form-encoded) before they reach the server. OTP bypass rules remove or spoof one-time password validation from response payloads.
📊
Live Rule Dashboard
A real-time web dashboard shows every rule hit, miss, and modification as it happens. Colour-coded entries, diff view, and per-rule statistics — no third-party tools required.
🌐
Stealth Chromium Browser
Launches an isolated Chromium profile with the interception extension pre-installed, custom fingerprint spoofing, timezone, locale and tracker blocking — ready in one click.
🔁
Response Fulfillment
Intercept and completely replace any HTTP response — inject custom status codes, headers, and body content. Ideal for mocking API responses during development and testing.
🛡️
Privacy & Fingerprint Shield
Strips device-fingerprint, ThreatMetrix, Kount, Forter, Signifyd, and Riskified session headers. Optional WebRTC leak protection and full tracker block-list included.
🔗
SOCKS5 / HTTP Proxy Chain
Route all browser traffic through an upstream proxy — supports SOCKS5 with remote DNS resolution. Integrates with GOST for flexible multi-hop tunnelling.
📡
Distribute API
Remotely push rule updates, custom scripts, and configuration to all running instances from a central server — no manual file editing needed. Rules refresh every 30 minutes.
How It Works

From install to interception
in under a minute

No certificate installs. No manual proxy configuration. Stealth Bridge handles everything automatically.

1
Run the Setup
Download and run the one-click installer. Stealth Bridge extracts a bundled Chromium browser and a local Python server — no additional software or dependencies required.
2
Open the Dashboard
The dashboard opens automatically at http://localhost:8420. Configure rules, enable intercept mode, set proxy and browser settings — all from a single page.
3
Launch the Browser
Click "Launch Browser" to open a pre-configured Chromium window with the Stealth Bridge extension already active. All traffic through this browser is intercepted automatically.
4
Write & Apply Rules
Create match & replace rules targeting request bodies, response bodies, headers, or URLs. Rules run in priority order and every hit is logged in real time with full before/after diff.
5
Intercept & Modify — Live
Enable intercept mode to pause and manually edit each request before it is forwarded. Or let automated rules handle everything in the background while you browse normally.
PrioRule NameTargetMatch PatternActive
1 cvv-form-remove request_body cvv=\d{3,4} ● on
2 cvv-json-remove request_body "cvv":"[^"]*" ● on
10 3ds-status-bypass response_body transStatus.*N ● on
20 otp-bypass-resp response_body otpRequired.*true ○ off
50 custom-inject response_body mohamedsec.*true ● on
Download

Ready to get started?

Windows x64 installer — all dependencies bundled. No Python, no Node.js, no manual configuration.

Latest: v1.2.0 | Stable release
↓ Download stealth-bridge-setup.exe
Windows 10 / 11 x64 only No install required Auto-update built in
Requirements

System requirements

Operating System
Windows 10 / 11 (x64)
RAM
4 GB minimum
Disk Space
500 MB free
Network
Any — proxy optional
Browser
Bundled (Chromium)
Dependencies
None — fully bundled
FAQ

Common questions

Does it require certificate installation or proxy setup? ▾
No. Stealth Bridge uses Chrome's built-in DevTools Protocol (CDP) to intercept traffic directly inside the browser — no system-wide proxy and no custom CA certificate needed.
Can I use my own browser instead of the bundled Chromium? ▾
Yes. Any Chromium-based browser (Chrome, Edge, Brave, Opera) can be selected in Dashboard → Settings → Browser. The extension can also be loaded as an unpacked extension in developer mode.
How do rules update automatically? ▾
Configure an update URL in Settings → Update URL pointing to your app.php endpoint. The server checks for a new version every 6 hours and downloads + silently installs the update when available.
Can rules be pushed remotely without restarting? ▾
Yes — set a Distribute URL in settings. Every 30 minutes the server pulls the latest rule set and scripts from your endpoint and applies them live without restarting the browser.
Does it work with Firefox or Safari? ▾
Full interception support is available for all Chromium-based browsers. Firefox (Waterfox) is supported via a separate extension build. Safari is not currently supported.
Is the dashboard accessible from other devices on the network? ▾
The server binds to 0.0.0.0 so other devices on the same network can reach the dashboard at http://<your-ip>:8420. Access is protected by an auth token shown in Settings → Auth Token.