gojue/ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.

183 best points · 71 comments · 2 Hacker News posts · 15,532 GitHub stars · View on GitHub

Hacker News discussions

• Capturing Linux SSL/TLS plaintext without a CA certificate using eBPF (183 points, 70 comments, by walterbell, 2024-07-11)
• ECapture: Capture SSL/TLS text content without CA cert using eBPF (1 points, 1 comments, by cfc4n, 2022-12-02)