Phase 4: authorised HTTPS interception (Mode B)

Toggleable transparent interception via mitmdump in a venv. Own RSA CA generated
in-app, downloadable (public cert only, key never leaves the box), with per-OS
install guide and fingerprint. nftables redirect accepts only dnat'd connections
(never an open proxy). HTTP Explorer with headers and opt-in body viewers (JSON/
text/hex/image, sandboxed). Honest status: pinned/untrusting = reported errors,
excluded hosts pass through, bodies off by default. Helper op + systemd unit +
installer venv build + boot restore.

This commit is contained in:

Andy Dixon

2026-10-10 08:05:42 +01:00

parent 4320428f41

commit 5dbf85f84e

25 changed files with 1460 additions and 13 deletions

									
										internal/capture/hub.go
									
		+1
		
												View File
												
				@@ -51,3 +51,4 @@ func (h *Hub) Publish(e Event) {

						}

					}

				}