What is Bettercap? and its uses!

BetterCAP

BetterCAP is a powerful, modular, portable MiTM framework that allows you to perform various types of Man-In-The-Middle attacks against the network. It can also help to manipulate HTTP and HTTPS traffic in real-time and much more.

BetterCap has some pretty impressive Spoofing abilities with multiple host discovery (just launch the tool and it will start discovery), ARP spoofing, DNS spoofing and ICMP doubledirect spoofing.

The other tool similar to this would be: MITMf – Man-In-The-Middle Attack Framework and specfically for SSL you have sslsniff v0.7 – SSL Man-In-The-Middle (MITM) Tool.

Ettercap still has some plus points like you can see connections and raw pcap stuff, but it’s not all relevant to everyone. Mostly it’s showing its’ age and BetterCap doesn’t have the below cons:

You can download BetterCap via the Ruby gem system so:

sudo apt-get install build-essential ruby-dev libpcap-dev

Then:

gem install bettercap

gem update bettercap

Kali Linux also has bettercap packaged, install it and all dependencies on the latest version of Kali using this:

apt-get update

apt-get install bettercap