PolarProxy

PolarProxy is a transparent SSL/TLS proxy created for incident responders and malware researchers. PolarProxy is primarily designed to intercept and decrypt TLS encrypted traffic from malware. PolarProxy decrypts and re-encrypts TLS traffic, while also saving the decrypted traffic in a PCAP file that can be loaded into Wireshark or an intrusion detection system (IDS). PolarProxy performs generic TLS decryption/encryption so that any TLS wrapped protocol can be inspected, including HTTPS, SMTPS, POP3S, IMAPS and DoT (DNS-over-TLS).