ecapture

eCapture is a Linux and Android tool that captures SSL/TLS plaintext data without requiring a CA certificate, utilizing eBPF technology. It supports various libraries such as OpenSSL, GnuTLS, and GoTLS, and also includes auditing capabilities for Bash, Zsh, and MySQL operations. Notable features include its ability to run with minimal privileges in Docker and automatic detection of libraries for seamless operation.