Quick Start on Linux
Get InterceptSuite running and start intercepting traffic on Linux in under 5 minutes.
Quick Start on Linux
Get InterceptSuite running on Linux in under 5 minutes.
Step 1: Launch InterceptSuite
When you launch the InterceptSuite application on Linux, it automatically:
- Opens the SOCKS5 TCP proxy on
127.0.0.1:4444 - Opens the UDP relay port on
127.0.0.1:4445
You should see the application interface with both services running in the background and confirmed in the Proxy tab.
Step 2: Install the CA Certificate (Required)
If this is your first time installing InterceptSuite, or you are updating to a new version, you must install the CA certificate into your system for TLS interception to work.
Export the Certificate from InterceptSuite
- In the InterceptSuite application, navigate to the Proxy tab.
- Go to the Settings tab within the Proxy section.
- In the Certificate Management section, click Export Certificate.
- Select DER format.
- Choose your preferred export directory and save the file.
Install the Certificate on Linux
Ubuntu / Debian:
sudo cp certificate.der /usr/local/share/ca-certificates/interceptsuite.der
sudo update-ca-certificates
CentOS / RHEL / Fedora:
sudo cp certificate.der /etc/pki/ca-trust/source/anchors/interceptsuite.der
sudo update-ca-trust
Arch Linux:
sudo cp certificate.der /etc/ca-certificates/trust-source/anchors/interceptsuite.der
sudo trust extract-compat
Step 3: Configure Your Application
Option 1: System-wide Proxy (GNOME)
- Open Settings -> Network -> Network Proxy.
- Select Manual.
- In Socks Host, enter:
127.0.0.1, Port:4444. - Click Apply.
Option 2: Environment Variables
export ALL_PROXY=socks5://127.0.0.1:4444
export all_proxy=socks5://127.0.0.1:4444
export HTTPS_PROXY=socks5://127.0.0.1:4444
export HTTP_PROXY=socks5://127.0.0.1:4444
Option 3: Application-specific (Firefox)
- Open Preferences -> General -> Network Settings.
- Select Manual proxy configuration.
- In SOCKS Host, enter:
127.0.0.1, Port:4444. - Select SOCKS v5.
- Check Proxy DNS when using SOCKS v5.
Option 4: ProxyBridge (Recommended for granular control)
- Install ProxyBridge using the Linux setup script:
curl -Lo deploy.sh https://raw.githubusercontent.com/InterceptSuite/ProxyBridge/refs/heads/master/Linux/deploy.sh && sudo bash deploy.sh - Open the ProxyBridge GUI with root privileges:
sudo ProxyBridgeGUI - Open Proxy Settings and configure the host to
127.0.0.1, port to4444, and type to SOCKS5. - Navigate to Proxy Rules and add a rule for the specific applications you want to route through InterceptSuite.
Direct Application Configuration
For apps that allow direct proxy configuration, use:
- Proxy Host:
127.0.0.1 - Proxy Port:
4444 - Proxy Type: SOCKS5
Step 4: Start Intercepting
- Configure your target application to use the SOCKS5 proxy.
- Start making network requests from the application.
- Monitor traffic in real-time through the InterceptSuite interface.
- Analyze captured data using the built-in Proxy History and Intercept tools.
You are all set. Next, explore the Traffic Interception guide to learn how to intercept and modify packets in real-time.