Invisible

Inject custom HTTP headers on specified domains

Some web services hide in plain sight. They're live, public, reachable - but locked behind a single HTTP header. No header, no access. The site might as well not exist. Invisible injects custom HTTP headers on any domain, straight from your browser. No proxy. No code change. No external tool. Just the right header at the right time. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ◆ PER-DOMAIN INJECTION Add headers to specific domains. Subdomains covered automatically. ◆ NAMED PROFILES Switch between configs in one click. Pentest, dev, staging - one profile each. ◆ BULK IMPORT Paste headers or load CSV. Set up dozens of rules in seconds. ◆ 100% LOCAL Zero data leaves your browser. Everything stays in chrome.storage.local. ◆ LIGHTWEIGHT Less than 1Mb. No bloat. Instant popup. Dark theme. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Built for pentesters, developers, and anyone who needs to knock on a door that most people don't even know exists. ▶ No tracking ▶ No permissions beyond what you grant ▶ Open philosophy