bettercap / bettercap

Dismiss
Join GitHub today
GitHub is home to over 36 million developers working together to host
and review code, manage projects, and build software together.

Sign up

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks. https://www.bettercap.org/
# password-sniffer # mitm # rogue-ap # wifi # hacking # security # spoofing # proxy # wifi-security # deauthentication-attack # dot11 # network-attacks # monitoring

# pmkid # wpa2 # redteam # ble # mousejack # hid # redteaming

1,728 commits 7 branches 33 releases 39 contributors GPL-3.0

Branch: master New pull request Find File Clone or download

evilsocket fix: fixed a nil pointer dereference in the http banner grabber of sy… … Downloading... Latest commit 1f3c009 5 days ago

caplets fix: caplet code is loaded entirely and comments are only skipped
Wantwhi…
to be notified of new releases in2 months ago
bettercap/bettercap?
core misc: small fix or general refactoring i did not bother commenting 20 days ago

firewall misc: small fix or general refactoring i did not bother commenting Sign in Signa up
month ago

log refact: refactored to use islazy and updated deps 7 months ago

modules fix: fixed a nil pointer dereference in the http banner grabber of sy… 5 days ago

network fix: api.rest and https.server certificates are now correctly generat… 21 days ago

packets fix: syn.scanner now uses a dedicated pcap handle to prevent deadlock… 21 days ago

session new: implemented mDNS server / spoofer (closes #542) 20 days ago

tls fix: api.rest and https.server certificates are now correctly generat… 21 days ago

vendor fix: updated dependencies (fixes #561) 11 days ago

.gitignore misc: small fix or general refactoring i did not bother commenting 2 months ago

.travis.yml misc: small fix or general refactoring i did not bother commenting 24 days ago

Dockerfile Fixed certificate issues 2 months ago

Gopkg.lock fix: updated dependencies (fixes #561) 11 days ago

Gopkg.toml fix: updated dependencies (fixes #561) 11 days ago

ISSUE_TEMPLATE.md misc: small fix or general refactoring i did not bother commenting 2 months ago

LICENSE.md Changing http links to https when possible a year ago

Makefile misc: added race detector build to Makefile 2 months ago

README.md misc: small fix or general refactoring i did not bother commenting 20 days ago

bettercap.service fix: fixed bettercap.service file to use the api.rest from the eval a… 8 months ago

build.sh misc: small fix or general refactoring i did not bother commenting 2 months ago

changelog.sh misc: small fix or general refactoring i did not bother commenting a year ago

main.go new: new -version command line argument to print version, build infor… 2 months ago

release.sh Add docker image latest 15 days ago

README.md
 release v2.24 license GPL3 build passing go report A coverage 51% in repositories 6

bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security
researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might
possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID
devices and Ethernet networks.

Main Features

WiFi networks scanning, deauthentication attack, clientless PMKID association attack and automatic WPA/WPA2
client handshakes capture.
Bluetooth Low Energy devices scanning, characteristics enumeration, reading and writing.
2.4Ghz wireless devices scanning and MouseJacking attacks with over-the-air HID frames injection (with
DuckyScript support).
Passive and active IP network hosts probing and recon.
ARP, DNS and DHCPv6 spoofers for MITM attacks on IP based networks.
Proxies at packet level, TCP level and HTTP/HTTPS application level fully scriptable with easy to implement
javascript plugins.
A powerful network sniffer for credentials harvesting which can also be used as a network protocol fuzzer.
A very fast port scanner.
A powerful REST API with support for asynchronous events notification on websocket to orchestrate your attacks
easily.
A very convenient web UI.
More!

About the 1.x Legacy Version

While the first version (up to 1.6.2) of bettercap was implemented in Ruby and only offered basic MITM, sniffing and
proxying capabilities, the 2.x is a complete reimplementation using the Go programming language.

This ground-up rewrite offered several advantages:

bettercap can now be distributed as a single binary with very few dependencies, for basically any OS and any
 architecture.
1.x proxies, although highly optimized and event based, used to bottleneck the entire network when performing a
MITM attack, while the new version adds almost no overhead.
Due to such performance and functional limitations, most of the features that the 2.x version is offering were simply
impossible to implement properly (read as: without killing the entire network ... or your computer).

For this reason, any version prior to 2.x is considered deprecated and any type of support has been dropped in favor of
the new implementation. An archived copy of the legacy documentation is available here, however it is strongly
suggested to upgrade.

Documentation and Examples

The project is documented here.

License

bettercap is made with ♥ by the dev team and it's released under the GPL 3 license.

Stargazers over time

4800

4200

3600

3000

Stargazers
2400

1800

1200

600

0
2018-01-07 2018-03-09 2018-05-09 2018-07-09 2018-09-09 2018-11-09 2019-01-09 2019-03-11 2019-05-11
Time