Getting Started
Quick Start on Windows
Get InterceptSuite running and start intercepting traffic on Windows in under 5 minutes.
Quick Start on Windows
Get InterceptSuite running on Windows in under 5 minutes.
Step 1: Launch InterceptSuite
When you launch the InterceptSuite application on Windows, it automatically:
- Opens the SOCKS5 TCP proxy on
127.0.0.1:4444 - Opens the UDP relay port on
127.0.0.1:4445
You should see the application interface with both services running in the background and confirmed in the Proxy tab.
Step 2: Install the CA Certificate (Required)
If this is your first time installing InterceptSuite, or you are updating to a new version, you must install the CA certificate into your system for TLS interception to work.
Install with one click (recommended)
- In the InterceptSuite application, navigate to the Proxy tab.
- Go to the Settings tab within the Proxy section.
- In the Certificate Management section, click Install Certificate.
- Click Yes on the Windows permission (UAC) prompt.
- The result appears next to the button and in the Logs tab. It is added for all users to Trusted Root Certification Authorities, and an older InterceptSuite certificate is replaced.
See Proxy Settings for exactly what it does on each operating system.
Or install it manually
Use this if the button reports a problem, to install the certificate on another device, or for applications that keep their own certificate store (for example Firefox).
Export the Certificate from InterceptSuite
- In the Certificate Management section, click Export Certificate.
- Select DER format.
- Choose your preferred export directory and save the file.
Install the Certificate on Windows
- Locate the exported certificate file (
.ceror.der). - Double-click on the certificate file.
- Click Install Certificate....
- Select Local Machine (not Current User).
- Choose Place all certificates in the following store.
- Click Browse and select Trusted Root Certification Authorities.
- Click Next and Finish.
- Click Yes when prompted with a security warning.
- You should see "The import was successful".
For a video guide, watch: InterceptSuite MITM Setup: Install CA Certificate on Windows
Step 3: Configure Your Application
Windows does not natively support SOCKS5 proxy in its system settings (Settings -> Network & Internet -> Proxy only exposes HTTP proxy).
Recommended: use the built-in Traffic Redirect
InterceptSuite can send any application's traffic through the proxy without changing the application, using its built-in Redirect tab.
- Make sure the redirect service is set up. It is offered on the last page of the installer; otherwise open Proxy > Redirect and click Set Up Redirect Service... and accept the Windows permission prompt (once).
- In Proxy > Redirect, click Add.
- Enter the program name in Application(s), for example
app.exe, and leave Action as Proxy. - Click Save, then Start Redirect.
Rules are saved with the project. See Traffic Redirect for rules by host and port, UDP, localhost and troubleshooting.
Alternative: ProxyBridge
ProxyBridge is the free, open-source tool the redirect is built on. Use it if you want its own window, or on a machine where you do not want InterceptSuite's redirect service.
- Download ProxyBridge from the ProxyBridge GitHub repository.
- Install and launch ProxyBridge.
- Navigate to the proxy menu and select Proxy Settings.
- Enter address:
127.0.0.1, port:4444, type: SOCKS5, then save. - Navigate to the proxy menu and Proxy Rules.
- Add a new rule for the application you want to intercept.
Do not run InterceptSuite's redirect and the ProxyBridge window at the same time. If the redirect reports that the engine is in use, close ProxyBridge and try again.
For a video guide, watch: Intercept Windows Thick Client with InterceptSuite
Direct Application Configuration
For apps that allow direct proxy configuration (for example, web browsers or specific clients), use:
- Proxy Host:
127.0.0.1 - Proxy Port:
4444 - Proxy Type: SOCKS5
Step 4: Start Intercepting
- Configure your target application to use the SOCKS5 proxy.
- Start making network requests from the application.
- Monitor traffic in real-time through the InterceptSuite interface.
- Analyze captured data using the built-in Proxy History and Intercept tools.
You are all set. Next, explore the Traffic Interception guide to learn how to intercept and modify packets in real-time.
