
ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
android-securitydatabase-securitydynamic-analysis-sandboxing+3
15.4k

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

No-root network monitor, firewall and PCAP dumper for Android

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".