Blog

From the InterceptSuite Team

Technical guides, deep dives, and updates on new features.

Release

InterceptSuite 2.1.0: Built-in Traffic Redirect for Windows and One-Click CA Install

InterceptSuite 2.1.0 adds a built-in traffic redirect for Windows, so thick clients with no proxy setting go through the proxy, plus an Install Certificate button for Windows, macOS and Linux.

I
October 25, 2026·6 min read
Replay

Debugging a Custom Binary Protocol: Capture, Edit, Resend

A practical workflow for debugging a custom binary protocol: capture real traffic, read it in hex, change one field at a time, resend it, and compare the server's replies.

I
October 6, 2026·7 min read
QUIC

Intercepting QUIC and HTTP/3 Traffic When mitmproxy Isn't Enough

How to intercept QUIC v1 and raw HTTP/3 traffic from desktop apps with InterceptSuite, and how it compares with mitmproxy's experimental QUIC support.

I
October 6, 2026·6 min read
Release

InterceptSuite 2.0.0: Replay, Interception Rules, Scope and AI Access (MCP)

InterceptSuite 2.0.0 adds Replay for non-HTTP protocols, interception rules, Scope, TLS pass-through, HTTP/3 over QUIC, a hex editor and an MCP server so Claude Code can drive your MITM proxy.

I
October 6, 2026·6 min read
IoT

IoT Traffic Interception: MQTT, CoAP, DTLS and QUIC (Guide Hub)

A starting point for intercepting IoT and embedded device traffic: what MQTT, CoAP, DTLS and QUIC need, how to route a device through a proxy, and the guides to follow.

I
October 6, 2026·5 min read
STARTTLS

Manually Test STARTTLS (SMTP, IMAP, PostgreSQL) in a GUI with Replay

Step by step: connect over TCP, exchange the plain-text commands, click Upgrade TLS and continue the session in InterceptSuite Replay. Covers SMTP, IMAP and PostgreSQL.

I
October 6, 2026·5 min read
MCP

MCP for Non-HTTP Traffic: Let Claude Code Analyse Thick-Client Protocols

How InterceptSuite's built-in MCP server lets an AI agent read Proxy History, use Replay and change settings for non-HTTP traffic, with the safety controls you should turn on.

I
October 6, 2026·5 min read
mitm_relay

mitm_relay, NoPE, PETEP and Deluder Alternatives: Non-HTTP MITM Proxies Compared

An honest comparison of the free tools pentesters use to intercept non-HTTP thick client traffic - mitm_relay, NoPE, PETEP and Deluder - and where InterceptSuite fits as a native GUI alternative.

I
October 6, 2026·7 min read
mitmproxy

mitmproxy vs InterceptSuite for Raw TCP, UDP, DTLS & QUIC

An honest comparison of mitmproxy and InterceptSuite for non-HTTP traffic: protocol coverage, GUI vs scripts, live editing, Replay, STARTTLS and pricing.

I
October 6, 2026·6 min read
OWASP

Testing OWASP Desktop App Top 10 DA7 (Insecure Communication) on Non-HTTP Protocols

How to test DA7 Insecure Communication in thick clients when the traffic is not HTTP: weak TLS, unencrypted database queries, MQTT, DTLS and custom TCP protocols, with InterceptSuite.

I
October 6, 2026·7 min read
Packet Sender

Packet Sender Alternative with TLS, DTLS and STARTTLS (and a Proxy)

Packet Sender sends TCP, UDP and SSL packets. InterceptSuite adds a MITM proxy so you can capture real traffic, then edit and replay it over TCP, TLS, DTLS, QUIC and STARTTLS.

I
October 6, 2026·5 min read
PETEP

PETEP vs InterceptSuite: Free Java Tool vs Native GUI for Non-HTTP Testing

A fair comparison of PETEP (with Deluder) and InterceptSuite for pentesting non-HTTP thick clients: protocols, repeater, proxy-unaware apps, and cost.

I
October 6, 2026·5 min read
PolarProxy

PolarProxy vs InterceptSuite: Decrypt-Only vs Decrypt-and-Edit

PolarProxy decrypts TLS to PCAP for analysis. InterceptSuite also lets you edit and replay C2 traffic in a lab. A fair comparison for malware analysts and DFIR teams.

I
October 6, 2026·5 min read
Replay

Postman for Raw TCP, UDP and TLS: How to Send a Packet to Your Server

Postman can't send raw TCP or UDP. Here is how to send a packet to your own server over TCP, TLS, UDP, DTLS or QUIC, edit it in hex, and read the response, with InterceptSuite Replay.

I
October 6, 2026·6 min read
Replay

How to Replay a Captured TCP Session Against a Live Server (and Edit It First)

tcpreplay and tcpliveplay replay packets for network testing. To resend and edit the application payload your client sent, capture it with InterceptSuite and send it again from Replay.

I
October 6, 2026·6 min read
Replay

How to Send Hex Bytes Over TCP: netcat and xxd vs a GUI

Send exact bytes to a TCP server with netcat and xxd, PowerShell or Python, then see how a GUI handles binary replies, TLS and repeated tests.

I
October 6, 2026·6 min read
Burp Suite

When Burp Suite Isn't Enough: Intercepting Thick Client Traffic

Burp Suite is built for HTTP. When you're testing a thick client that speaks raw TCP, TLS, or a custom binary protocol, you need a different tool. Here's how to intercept non-HTTP thick client traffic with InterceptSuite.

S
August 17, 2026·8 min read
MQTT

Intercepting MQTT Traffic with InterceptSuite

Step-by-step guide to intercepting MQTT broker traffic including TLS-secured connections using InterceptSuite and ProxyBridge. See topics, payloads, and credentials.

I
July 18, 2026·6 min read
IoT

IoT Security Testing: Intercepting DTLS and UDP Traffic with InterceptSuite

How to intercept DTLS and raw UDP traffic from IoT devices using InterceptSuite. Full MITM for CoAP, DTLS-secured sensors, and custom UDP protocols.

I
July 11, 2026·8 min read
Malware Analysis

Decrypt & Modify Malware C2 TLS Traffic (vs PolarProxy)

Decrypt C2 over TLS, DTLS and UDP in your lab, then edit and replay commands. Compare with PolarProxy.

I
July 3, 2026·9 min read
PostgreSQL

Intercepting PostgreSQL Traffic with InterceptSuite

Learn how to intercept PostgreSQL traffic including SSL/TLS upgrades using InterceptSuite and ProxyBridge. See plaintext queries, credentials, and responses.

I
June 30, 2026·7 min read
Echo Mirage

Echo Mirage Alternative for Windows 10/11, macOS and Linux: InterceptSuite vs Echo Mirage

Echo Mirage was the go-to tool for intercepting non-HTTP traffic - but it's outdated. See how InterceptSuite delivers proxy-based MITM with TCP, TLS, STARTTLS, UDP, and DTLS support on modern systems.

I
June 27, 2026·8 min read
Linux

How to Install the InterceptSuite CA Certificate on Linux

Step-by-step guide to trust the InterceptSuite CA certificate on Linux (Ubuntu, Debian, Arch, Fedora) so you can intercept HTTPS traffic without certificate errors.

I
March 27, 2026·6 min read
macOS

How to Install the InterceptSuite CA Certificate on macOS

Step-by-step guide to trust the InterceptSuite CA certificate on macOS using Keychain Access so you can intercept HTTPS traffic without certificate errors.

I
March 18, 2026·4 min read
Windows

How to Install the InterceptSuite CA Certificate on Windows

Step-by-step guide to trust the InterceptSuite CA certificate on Windows so you can intercept HTTPS traffic without certificate errors.

I
March 9, 2026·5 min read
LDAP

Intercepting LDAP With InterceptSuite

Learn how to intercept encrypted LDAP traffic, including STARTTLS upgrades on port 389, using InterceptSuite and ProxyBridge.

S
August 28, 2025·6 min read