ecapture
eCapture captures SSL/TLS plaintext data without the need to install MITM proxy or custom CA certificate using eBPF technology. supports Android operating systems with Linux in x86_64 and aarch64 architectures. OpenSSL, BoringSSL, GoTLS and GnuTLS libraries, as well as can audit bash, zsh and MySQL queries.
EC
gojue · Observability / Datadog Alternatives
STARS15.5K
FORKS1.6K
COMMITS0
CONTRIBUTORS0
VERSIONv2.7.0
UPDATEDtoday
CeBPFSSL/TLSSecurityApache-2.0
Common commercial products in this category: Datadog, New Relic, Dynatrace
What can it do?
- From libraries like OpenSSL and GoTLS, you capture SSL/TLS encrypted traffic as plain text.
- You monitor host security by inspecting Bash and zsh shell command history.
- You follow MySQL and MariaDB database queries with eBPF.