Combines scanners, persists state, stays on top, reliably appears in SPAs, with enhanced stream detection.
Think of this script as a handy little multi-tool for peeking under the hood of websites you visit. It automatically scans the page (and keeps scanning as things change) to find specific types of links and resources, like video streams, images, or network requests, and displays them all in one convenient, stay-on-top panel.
It's designed to be persistent (remembers if you had it open), work well on modern single-page apps (SPAs), and give you quick access to stuff that might otherwise require digging through DevTools.
It sets up shop on the webpage and starts looking for a few key things:
.m3u8, .mp4, .vtt, .srt, .mpd, or URLs that look like streaming manifests or segments (using patterns like /hls/, /dash/, playlist, etc.). It checks common places like <video>, <source>, <a> tags, and even searches inside inline <script> blocks.<iframe> (and similar like <embed>, <object>) elements on the page and their source URLs. Handy for seeing what's embedded.fetch and XMLHttpRequest calls made by the page, showing the URL, method (GET/POST), status code, duration, and sometimes the request payload (if it can grab it).<img> tags and even CSS background images, listing their URLs. It includes neat features like copy/view/download buttons and an image preview on hover.It's pure JavaScript running directly in your browser on the page you're visiting. Here's the gist:
z-index values to try and stay on top of other elements.document) for relevant tags (video, img, iframe, script, etc.) and attributes (src, href, data-src, style)._RGX_STRM) to search the text content of inline <script> tags for patterns matching potential stream URLs.window.fetch and XMLHttpRequest.prototype.send/open functions. This means before the page makes a network request using these methods, the script gets a look-in, and after the request finishes, it logs the result.MutationObserver to watch for changes to the webpage after it initially loads. If new elements are added or attributes change (like a video player loading dynamically), it triggers a rescan to find new stuff. This is key for SPAs.Element.prototype.setAttribute to catch changes made via JavaScript that might reveal new source URLs.sessionStorage (which clears when you close the tab/browser) to remember whether you left the panel open or closed, so it reappears that way if you navigate within the same site/tab.popstate, hashchange) and even custom events triggered by its history patching, ensuring the UI stays put and rescans happen when you navigate within a single-page application.URL.createObjectURL to be aware when Blobs (often used for local media playback) are created, though it primarily relies on finding the src attribute where the Blob URL is used..m3u8 or .mp4 links that websites might try to obscure, useful for external players or download tools.This is important! Here's the breakdown:
@grant none): This is a big plus! @grant none means the script runs in the standard web page sandbox. It cannot make cross-domain requests on its own, access browser tabs, read/write files directly, or use special Tampermonkey/Greasemonkey APIs. It has the same limitations as the JavaScript already running on the page.fetch or XHR (common practice), the script could potentially log that data locally within its panel if it manages to capture the payload. The payload capture is limited (e.g., it tries to read text, might truncate long data) but it's something to be aware of.Verdict: For most uses (finding streams on media sites, grabbing images, general debugging), it's generally safe. The primary consideration is the network logging – be mindful if you're using it on highly sensitive pages where you input critical personal data. Think of it like a localized, simplified DevTools Network tab integrated into the page.
TL;DR Safety: It runs with standard page permissions (@grant none), doesn't send data out, but does locally log network requests made by the page, potentially including data you send in forms if sent via fetch/XHR. Use common sense on sensitive sites.
Ctrl+Shift+A to toggle the panel.Note: It's marked as BETA, so expect potential quirks or bugs! Enjoy scanning!
QingJ © 2025
镜像随时可能失效，请加Q群300939539或关注我们的公众号极客氢云获取最新地址