ecapture

We have hosted the application ecapture in order to run this application in our online workstations with Wine or directly.

Quick description about ecapture:

Capture SSL/TLS text content without a CA certificate using eBPF. Supports Linux/Android kernel versions x86_64 4.18 and above, aarch64 5.5 and above. Does not support Windows and macOS systems.

Features:

• Supports Linux/Android (x86_64/Aarch64)
• Capture SSL/TLS text content without CA certificate
• SSL/TLS plaintext capture, support openssl\libressl\boringssl\gnutls\nspr(nss) libraries
• GoTLS plaintext support go tls library, which refers to encrypted communication in https/tls programs written in the golang language
• Bash audit, capture bash command for Host Security Audit
• Mysql query SQL audit, support mysqld 5.6\5.7\8.0, and mariadDB

Programming Language: C.
Categories: