Quick Start on Linux

Get InterceptSuite running on Linux in under 5 minutes.

Step 1: Launch InterceptSuite

When you launch the InterceptSuite application on Linux, it automatically:

Opens the SOCKS5 TCP proxy on 127.0.0.1:4444
Opens the UDP relay port on 127.0.0.1:4445

You should see the application interface with both services running in the background and confirmed in the Proxy tab.

Step 2: Install the CA Certificate (Required)

If this is your first time installing InterceptSuite, or you are updating to a new version, you must install the CA certificate into your system for TLS interception to work.

Install with one click (recommended)

In the InterceptSuite application, navigate to the Proxy tab.
Go to the Settings tab within the Proxy section.
In the Certificate Management section, click Install Certificate.
Enter your password in the graphical prompt (pkexec).
The result appears next to the button and in the Logs tab. It is written to your distribution's trust folder and the trust store is refreshed.

See Proxy Settings for exactly what it does on each operating system.

Or install it manually

Use this if the button reports a problem, to install the certificate on another device, or for applications that keep their own certificate store (for example Firefox).

Export the Certificate from InterceptSuite

In the Certificate Management section, click Export Certificate.
Select DER format.
Choose your preferred export directory and save the file.

Install the Certificate on Linux

Ubuntu / Debian:

sudo cp certificate.der /usr/local/share/ca-certificates/interceptsuite.der
sudo update-ca-certificates

CentOS / RHEL / Fedora:

sudo cp certificate.der /etc/pki/ca-trust/source/anchors/interceptsuite.der
sudo update-ca-trust

Arch Linux:

sudo cp certificate.der /etc/ca-certificates/trust-source/anchors/interceptsuite.der
sudo trust extract-compat

Step 3: Configure Your Application

The built-in Traffic Redirect is available on Windows only for now. On Linux, use the options below; ProxyBridge gives you per-application routing.

Option 1: System-wide Proxy (GNOME)

Open Settings -> Network -> Network Proxy.
Select Manual.
In Socks Host, enter: 127.0.0.1, Port: 4444.
Click Apply.

Option 2: Environment Variables

export ALL_PROXY=socks5://127.0.0.1:4444
export all_proxy=socks5://127.0.0.1:4444
export HTTPS_PROXY=socks5://127.0.0.1:4444
export HTTP_PROXY=socks5://127.0.0.1:4444

Option 3: Application-specific (Firefox)

Open Preferences -> General -> Network Settings.
Select Manual proxy configuration.
In SOCKS Host, enter: 127.0.0.1, Port: 4444.
Select SOCKS v5.
Check Proxy DNS when using SOCKS v5.

Option 4: ProxyBridge (Recommended for granular control)

Install ProxyBridge using the Linux setup script:

curl -Lo deploy.sh https://raw.githubusercontent.com/InterceptSuite/ProxyBridge/refs/heads/master/Linux/deploy.sh && sudo bash deploy.sh

Open the ProxyBridge GUI with root privileges:
```
sudo ProxyBridgeGUI
```
Open Proxy Settings and configure the host to 127.0.0.1, port to 4444, and type to SOCKS5.
Navigate to Proxy Rules and add a rule for the specific applications you want to route through InterceptSuite.

Direct Application Configuration

For apps that allow direct proxy configuration, use:

Proxy Host: 127.0.0.1
Proxy Port: 4444
Proxy Type: SOCKS5

Step 4: Start Intercepting

Configure your target application to use the SOCKS5 proxy.
Start making network requests from the application.
Monitor traffic in real-time through the InterceptSuite interface.
Analyze captured data using the built-in Proxy History and Intercept tools.

You are all set. Next, explore the Traffic Interception guide to learn how to intercept and modify packets in real-time.