From charlesreid1

Revision as of 00:35, 22 August 2016 by Admin (talk | contribs)

Project page: https://www.bettercap.org/

What is bettercap?

Bettercap is a better version of Ettercap. The intention was to create a new tool that worked the same, but better.

But what is it, really? It has two objectives: first, it is a tool for sniffing traffic, and second, it is a tool for carrying out man in the middle attacks (so that you can sniff the traffic of your network neighbors).

Like Ettercap, Bettercap has several nice features:

  • half and full duplex ARP spoofing
  • ICMP/DNS/NDP spoofing
  • Host discovery
  • Credentials harvesting for multiple protocols (POST, HTTPS, FTP, IRC, POP, SMTP, etc)
  • Customizable sniffer
  • Modular HTTP/HTTPS proxies to allow for injection of custom HTML, JS, CSS code or urls
  • SSLStripping with HSTS bypass

Dependencies

To install bettercap, you need ruby and libpcap:

$ apt-get install build-essential ruby-dev libpcap-dev

Install

Now install the bettercap gem:

$ gem install bettercap
$ gem update bettercap

Links

Project page: https://www.bettercap.org/

Basics: http://www.darknet.org.uk/2016/03/bettercap-modular-portable-mitm-framework/

Bettercap tutorial: https://danielmiessler.com/study/bettercap/

Flags