Navigation



BetterCap – Modular, Portable MiTM Framework

Last updated: November 11, 2017 | 7,364 views

BetterCAP is a powerful, modular, portable MiTM framework that allows you to perform various types of Man-In-The-Middle attacks against the network. It can also help to manipulate HTTP and HTTPS traffic in real-time and much more.

BetterCap - Modular, Portable MiTM Framework


BetterCap has some pretty impressive Spoofing abilities with multiple host discovery (just launch the tool and it will start discovery), ARP spoofing, DNS spoofing and ICMP doubledirect spoofing.

The other tool similar to this would be: MITMf – Man-In-The-Middle Attack Framework and specfically for SSL you have sslsniff v0.7 – SSL Man-In-The-Middle (MITM) Tool.

BetterCap MiTM Features

Some of the main features include:

  • Full and half duplex ARP spoofing.
  • The first real ICMP DoubleDirect spoofing implementation.
  • Configurable DNS spoofing.
  • Realtime and completely automatized host discovery.
  • Realtime credentials harvesting for protocols such as HTTP(S) POSTed data, Basic and Digest Authentications, FTP, IRC, POP, IMAP, SMTP, NTLM ( HTTP, SMB, LDAP, etc ) and more.
  • Fully customizable network sniffer.
  • Modular HTTP and HTTPS transparent proxies with support for user plugins + builtin plugins to inject custom HTML code, JS or CSS files and URLs.
  • SSLStripping with HSTS bypass.
  • Builtin HTTP server.

Why BetterCap not Ettercap?

Ettercap still has some plus points like you can see connections and raw pcap stuff, but it’s not all relevant to everyone. Mostly it’s showing its’ age and BetterCap doesn’t have the below cons:


  • Ettercap was a great tool, but it’s old
  • Ettercap filters do not work most of the times
  • Ettercap filters are outdated
  • Ettercap filters are hard to implement due to the implementation language.
  • Ettercap is unstable on big networks (try host discovery on a network bigger than /24)
  • Ettercap is hard to extend or add modules to unless you’re a C/C++ developer.
  • Ettercap’s and MITMf’s ICMP spoofing is completely useless in 2016.
  • Ettercap does not provide a builtin and modular HTTP(S) transparent proxy.
  • Ettercap does not provide a smart and fully customizable credentials sniffer.

You can download BetterCap via the Ruby gem system so:

Then:

Kali Linux also has bettercap packaged, install it and all dependencies on the latest version of Kali using this:

Or read more here.

Share107
Tweet5
Share56
Buffer
WhatsApp
Email
168 Shares
Posted in: Networking Hacking

, , , , , , ,


Latest Posts:


truffleHog - Search Git for High Entropy Strings with Commit History truffleHog – Search Git for High Entropy Strings with Commit History
truffleHog is a Python-based tool to search Git for high entropy strings, digging deep into commit history and branches. This is effective at finding secrets accidentally committed.
December 2, 2019 - 84 Shares
AIEngine - AI-driven Network Intrusion Detection System AIEngine – AI-driven Network Intrusion Detection System
AIEngine is a next-generation interactive/programmable Python/Ruby/Java/Lua and Go AI-driven Network Intrusion Detection System engine with many capabilities.
November 25, 2019 - 94 Shares
Sooty - SOC Analyst All-In-One CLI Tool Sooty – SOC Analyst All-In-One CLI Tool
Sooty is a tool developed with the task of aiding a SOC analyst to automate parts of their workflow and speed up their process.
November 1, 2019 - 132 Shares
UBoat - Proof Of Concept PoC HTTP Botnet Project UBoat – Proof Of Concept PoC HTTP Botnet Project
UBoat is a PoC HTTP Botnet designed to replicate a full weaponised commercial botnet like the famous large scale infectors Festi, Grum, Zeus and SpyEye.
October 24, 2019 - 119 Shares
LambdaGuard - AWS Lambda Serverless Security Scanner LambdaGuard – AWS Lambda Serverless Security Scanner
LambdaGuard is a tool which allows you to visualise and audit the security of your serverless assets, an open-source AWS Lambda Serverless Security Scanner.
October 7, 2019 - 152 Shares
exe2powershell - Convert EXE to BAT Files exe2powershell – Convert EXE to BAT Files
exe2powershell is used to convert EXE to BAT files, the previously well known tool for this was exe2bat, this is a version for modern Windows.
September 23, 2019 - 155 Shares


2 Responses to BetterCap – Modular, Portable MiTM Framework

  1. skriptkidd0r March 26, 2016 at 3:12 am #

    >Ettercap is hard to extend or add modules to unless you’re a C/C++ developer.

    ahahaha fucking script kiddies are afraid of learning a real language

    • Bluecoder March 28, 2016 at 3:16 am #

      I think its not just people are script kiddies its just that some of us are know python or ruby or java and well this is a good framework for cutting that time in adding modules by learning C++