Blog
From the InterceptSuite Team
Technical guides, deep dives, and updates on new features.
InterceptSuite 2.1.0: Built-in Traffic Redirect for Windows and One-Click CA Install
InterceptSuite 2.1.0 adds a built-in traffic redirect for Windows, so thick clients with no proxy setting go through the proxy, plus an Install Certificate button for Windows, macOS and Linux.
Debugging a Custom Binary Protocol: Capture, Edit, Resend
A practical workflow for debugging a custom binary protocol: capture real traffic, read it in hex, change one field at a time, resend it, and compare the server's replies.
Intercepting QUIC and HTTP/3 Traffic When mitmproxy Isn't Enough
How to intercept QUIC v1 and raw HTTP/3 traffic from desktop apps with InterceptSuite, and how it compares with mitmproxy's experimental QUIC support.
InterceptSuite 2.0.0: Replay, Interception Rules, Scope and AI Access (MCP)
InterceptSuite 2.0.0 adds Replay for non-HTTP protocols, interception rules, Scope, TLS pass-through, HTTP/3 over QUIC, a hex editor and an MCP server so Claude Code can drive your MITM proxy.
IoT Traffic Interception: MQTT, CoAP, DTLS and QUIC (Guide Hub)
A starting point for intercepting IoT and embedded device traffic: what MQTT, CoAP, DTLS and QUIC need, how to route a device through a proxy, and the guides to follow.
Manually Test STARTTLS (SMTP, IMAP, PostgreSQL) in a GUI with Replay
Step by step: connect over TCP, exchange the plain-text commands, click Upgrade TLS and continue the session in InterceptSuite Replay. Covers SMTP, IMAP and PostgreSQL.
MCP for Non-HTTP Traffic: Let Claude Code Analyse Thick-Client Protocols
How InterceptSuite's built-in MCP server lets an AI agent read Proxy History, use Replay and change settings for non-HTTP traffic, with the safety controls you should turn on.
mitm_relay, NoPE, PETEP and Deluder Alternatives: Non-HTTP MITM Proxies Compared
An honest comparison of the free tools pentesters use to intercept non-HTTP thick client traffic - mitm_relay, NoPE, PETEP and Deluder - and where InterceptSuite fits as a native GUI alternative.
mitmproxy vs InterceptSuite for Raw TCP, UDP, DTLS & QUIC
An honest comparison of mitmproxy and InterceptSuite for non-HTTP traffic: protocol coverage, GUI vs scripts, live editing, Replay, STARTTLS and pricing.
Testing OWASP Desktop App Top 10 DA7 (Insecure Communication) on Non-HTTP Protocols
How to test DA7 Insecure Communication in thick clients when the traffic is not HTTP: weak TLS, unencrypted database queries, MQTT, DTLS and custom TCP protocols, with InterceptSuite.
Packet Sender Alternative with TLS, DTLS and STARTTLS (and a Proxy)
Packet Sender sends TCP, UDP and SSL packets. InterceptSuite adds a MITM proxy so you can capture real traffic, then edit and replay it over TCP, TLS, DTLS, QUIC and STARTTLS.
PETEP vs InterceptSuite: Free Java Tool vs Native GUI for Non-HTTP Testing
A fair comparison of PETEP (with Deluder) and InterceptSuite for pentesting non-HTTP thick clients: protocols, repeater, proxy-unaware apps, and cost.
PolarProxy vs InterceptSuite: Decrypt-Only vs Decrypt-and-Edit
PolarProxy decrypts TLS to PCAP for analysis. InterceptSuite also lets you edit and replay C2 traffic in a lab. A fair comparison for malware analysts and DFIR teams.
Postman for Raw TCP, UDP and TLS: How to Send a Packet to Your Server
Postman can't send raw TCP or UDP. Here is how to send a packet to your own server over TCP, TLS, UDP, DTLS or QUIC, edit it in hex, and read the response, with InterceptSuite Replay.
How to Replay a Captured TCP Session Against a Live Server (and Edit It First)
tcpreplay and tcpliveplay replay packets for network testing. To resend and edit the application payload your client sent, capture it with InterceptSuite and send it again from Replay.
How to Send Hex Bytes Over TCP: netcat and xxd vs a GUI
Send exact bytes to a TCP server with netcat and xxd, PowerShell or Python, then see how a GUI handles binary replies, TLS and repeated tests.
When Burp Suite Isn't Enough: Intercepting Thick Client Traffic
Burp Suite is built for HTTP. When you're testing a thick client that speaks raw TCP, TLS, or a custom binary protocol, you need a different tool. Here's how to intercept non-HTTP thick client traffic with InterceptSuite.
Intercepting MQTT Traffic with InterceptSuite
Step-by-step guide to intercepting MQTT broker traffic including TLS-secured connections using InterceptSuite and ProxyBridge. See topics, payloads, and credentials.
IoT Security Testing: Intercepting DTLS and UDP Traffic with InterceptSuite
How to intercept DTLS and raw UDP traffic from IoT devices using InterceptSuite. Full MITM for CoAP, DTLS-secured sensors, and custom UDP protocols.
Decrypt & Modify Malware C2 TLS Traffic (vs PolarProxy)
Decrypt C2 over TLS, DTLS and UDP in your lab, then edit and replay commands. Compare with PolarProxy.
Intercepting PostgreSQL Traffic with InterceptSuite
Learn how to intercept PostgreSQL traffic including SSL/TLS upgrades using InterceptSuite and ProxyBridge. See plaintext queries, credentials, and responses.
Echo Mirage Alternative for Windows 10/11, macOS and Linux: InterceptSuite vs Echo Mirage
Echo Mirage was the go-to tool for intercepting non-HTTP traffic - but it's outdated. See how InterceptSuite delivers proxy-based MITM with TCP, TLS, STARTTLS, UDP, and DTLS support on modern systems.
How to Install the InterceptSuite CA Certificate on Linux
Step-by-step guide to trust the InterceptSuite CA certificate on Linux (Ubuntu, Debian, Arch, Fedora) so you can intercept HTTPS traffic without certificate errors.
How to Install the InterceptSuite CA Certificate on macOS
Step-by-step guide to trust the InterceptSuite CA certificate on macOS using Keychain Access so you can intercept HTTPS traffic without certificate errors.
How to Install the InterceptSuite CA Certificate on Windows
Step-by-step guide to trust the InterceptSuite CA certificate on Windows so you can intercept HTTPS traffic without certificate errors.
Intercepting LDAP With InterceptSuite
Learn how to intercept encrypted LDAP traffic, including STARTTLS upgrades on port 389, using InterceptSuite and ProxyBridge.
