beldmian/traffic_chef
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
2 commits 1 branch 0 tags 108 KiB
  • TypeScript 93.1%
  • CSS 6.6%
  • HTML 0.3%
Find a file
Exact
Codex 43b9bf5ff4 Add TLS decryption for SSL key logs 
- Parse sidecar and embedded TLS key log secrets
- Decrypt supported TLS 1.2/1.3 AES-GCM HTTP payloads
- Update capture UI and tests for key log loading
2026-07-09 13:29:20 +00:00
public Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
src Add TLS decryption for SSL key logs 2026-07-09 13:29:20 +00:00
.gitignore Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
.oxlintrc.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
index.html Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
package-lock.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
package.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
README.md Add TLS decryption for SSL key logs 2026-07-09 13:29:20 +00:00
tsconfig.app.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
tsconfig.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
tsconfig.node.json Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00
vite.config.ts Initial Traffic Chef workbench 2026-07-09 13:09:12 +00:00

README.md

Traffic Chef

Traffic Chef is a browser workbench for exploring packet captures and raw HTTP messages with a CyberChef-style recipe pipeline.

What it does

  • Loads pcapng captures, with classic pcap support as a fallback.
  • Decodes Ethernet, Linux cooked captures, IPv4, IPv6, TCP, UDP, DNS hints, TLS ClientHello SNI, and QUIC packet metadata.
  • Reassembles visible TCP payloads per direction enough to extract cleartext HTTP/1 and cleartext HTTP/2 messages.
  • Decrypts TLS HTTP payloads when NSS/SSLKEYLOG key material is uploaded as a sidecar file or embedded in a pcapng Decryption Secrets Block.
  • Parses pasted HTTP/1 requests/responses, HTTP/2 or HTTP/3 pseudo-header text, HTTP/2 frame bytes, and basic HTTP/3 frame bytes.
  • Applies recipe operations for overview, packet tables, conversation tables, timelines, HTTP extraction, headers, query parsing, cURL/fetch conversion, JSON body formatting, payload hexdumps, redaction, and JSON export.

Encrypted TLS, HTTP/2 over TLS, and HTTP/3 over QUIC payloads cannot be decrypted from a capture without keys. Traffic Chef currently supports TLS 1.3 AES-GCM application secrets and TLS 1.2 AES-GCM CLIENT_RANDOM master secrets; unsupported cipher suites remain surfaced as encrypted TLS flows.

Run

npm install
npm run dev

Open the Vite URL, normally http://localhost:5173/.

Validate

npm test
npm run lint
npm run build

Repository

The configured remote is:

ssh://git@git.beldmian.ru:2222/beldmian/traffic_chef.git