gojue / ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

bpftrace / bpftrace

High-level tracing language for Linux

eunomia-bpf / bpftime

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework