I expect the program to scan memory of all local processes (or debug them, or provide crypto libraries with hook like in LD_PRELOAD) and use keys to decrypt traffic, making it analysable with Wireshark and other tools (at least tcpdump -A
).
Are there tools that collects keys from running processes and decrypts SSL/SSH? Like "see though all local encryption".
The target goal is to see everything flowing to/from my computer, including in encrypted form. I don't like "mysterious" unattended network activity and not being able to know what this process is sending them (and too lazy to deal with each case individually).