chisel is a similar tool in this space https://github.com/jpillora/chisel
I don’t get why headers and requests need to be spoofed if all traffic is over https?
replies(4):
I don’t get why headers and requests need to be spoofed if all traffic is over https?
It's obfuscation at best. I'm not sure the encrypted traffic will look particularly php-ish for example. Compressed formats might look vaguely passable.
I can't see any stenography code or libraries in the repo.