I mean, if I am, for example, on Facebook, every packet I send out of my NIC is encrypted. But there must be phase of that packet before it is encrypted. The browser (I think) must create that packet and encrypt it afterwards. So if I am on the machine creating those packets, am I able to see them before encryption?
And if yes, are there malware capable of doing this? I think with administrator/root privileges it is certain that it can, but what about without them?