Support for Intercepting Encrypted traffic from HTTP/2
- Dominant language
- C
- Stars
- 22.7k
- Forks
- 4.1k
- Avg merge
- 10d 4h
- Merged PRs (30d)
- 3
Description
Hi,
I'm using ``tools/sslsniff.py `` to intercept and log HTTP/HTTPS traffic. It works great for tools like curl, but I noticed it's not detecting traffic when requests are made using Python's requests library or from compiled Go binaries.
My end goal is to detect and log all outgoing HTTP/HTTPS requests from any script or binary on the system.
Are there any recommendations or enhancements to make sslsniff.py more effective for this use case? Or are there alternative approaches/tools you’d suggest to reliably capture this kind of traffic?
Thanks!
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with tools/sslsniff.py and compare its behavior for curl, Python requests, and compiled Go binaries. Clarify whether HTTP/2 encrypted traffic and all outgoing HTTP/HTTPS requests are in scope, then define a reproducible validation case showing which requests are detected and logged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, python
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100