Complete, modular, portable and easily extensible MITM framework


The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID devices and Ethernet networks.

Main Features:
 * WiFi networks scanning, deauthentication attack, clientless PMKID
   association attack and automatic WPA/WPA2 client handshakes capture.
 * Bluetooth Low Energy devices scanning, characteristics enumeration,
   reading and writing.
 * 2.4Ghz wireless devices scanning and MouseJacking attacks with
   over-the-air HID frames injection (with DuckyScript support).
 * Passive and active IP network hosts probing and recon.
 * ARP, DNS, NDP and DHCPv6 spoofers for MITM attacks on IPv4 and IPv6
   based networks.
 * Proxies at packet level, TCP level and HTTP/HTTPS application level
   fully scriptable with easy to implement javascript plugins.
 * A powerful network sniffer for credentials harvesting which can also be
   used as a network protocol fuzzer.
 * A very fast port scanner.
 * A powerful REST API with support for asynchronous events notification
   on websocket to orchestrate your attacks easily.
 * A very convenient web UI.
 * More! (

This package contains a Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and attacks.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install bettercap