/bettercap

A complete, modular, portable and easily extensible MITM framework.

Primary LanguageRubyGNU General Public License v3.0GPL-3.0

BetterCap

Copyleft of Simone 'evilsocket' Margaritelli.
http://www.evilsocket.net/

BetterCap is an attempt to create a complete, modular, portable and easily extensible MITM framework with every kind of features could be needed while performing a man in the middle attack.

This software is currently alpha stage, its usage is not recommended unless you really know what you are doing.

TODO

  • FIXES

    • Whole subnet will take a lot of time due to arp packets needed to get hardware addresses.

  • General

    • Implement abstraction interfaces.
    • Support multiple targets at once.
    • Auto host discovery/scanning and auto add.
    • HTTP modular transparent proxy with plugins.

  • Firewalling

    • Implement Firewall class for OS X.
    • Implement Firewall class for GNU/Linux.
    • Traffic redirection feature.

  • Spoofers

    • ARP spoofer.
    • ICMP spoofer.
    • ICMP6 spoofer.

MODULES

  • ARP: module for arp poisoning (default)
  • INFOTARGET: module for get info from targets like vendor,os and open ports using nmap.

DEPENDS

  • colorize (gem install colorize)
  • packetfu (gem install packetfu)
  • pcaprub (gem install pcaprub) [sudo apt-get install ruby-dev libpcap-dev]