GitHub - gojue/ecapture: Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
中文介绍 | English | 日本語
eCapture(旁观者): capture SSL/TLS text content without a CA certificate using eBPF.
Note
Supports Linux/Android kernel versions x86_64 4.18 and above, aarch64 5.5 and above.
Does not support Windows and macOS system.
How eCapture works
eCapture User Manual
Getting started
eCapture Architecture
What's eBPF
How to compile
Contributing
How eCapture works
SSL/TLS plaintext capture, support openssl\libressl\boringssl\gnutls\nspr(nss) libraries.
GoTLS plaintext support go tls library...
Read more at github.com