FICHA · AUR

polarproxy-bin

Transparent TLS and SSL inspection proxy primarily designed for incident responders and malware researchers to intercept, decrypt, and re-encrypt TLS encrypted traffic from malware while saving it in a PCAP file.

  • TLS inspection proxy
  • CLI
  • NETWORK
  • SECURITY
  • Launchable
  • Runs in terminal
  • Background service
official+codex · reviewed · Jun 3, 2026 description in en

Description

Encrypted malware traffic can be intercepted, decrypted, re-encrypted, and saved to PCAP for incident-response analysis. This transparent proxy is designed for responders and malware researchers working in controlled labs. It can expose private TLS traffic and requires authorization, careful certificate handling, and network isolation.

How to run

polarproxy

Commands: polarproxy

Permissions

Permissions not analysed for this source yet.