bettercap
Modern, modular MITM & network attack swiss-army knife.
KaliParrothigh
pkg: bettercap
bettercap handles ARP/DNS spoofing, sniffing, Wi-Fi and BLE attacks, and HTTP(S) proxying via a scriptable module system.
Syntax
bettercap -iface {iface} → enable modules
Example
sudo bettercap -iface eth0 -eval "net.probe on; arp.spoof on"
Discovers hosts and starts ARP spoofing on the LAN.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
bettercap
Usage examples
bettercap -iface eth0
Start the interactive session.
bettercap -iface eth0 -eval "net.probe on; arp.spoof on"
Discover hosts and ARP-spoof.
Advantages
- Modern, modular and scriptable
- Wi-Fi/BLE/Ethernet in one tool
- Web UI available
Disadvantages
- Very intrusive capabilities
- Powerful — easy to disrupt networks
- Module learning curve
Tags
#mitm#arp#wifi
Official docs: bettercap ↗
Related commands
Frequently asked questions
What is bettercap used for?
bettercap handles ARP/DNS spoofing, sniffing, Wi-Fi and BLE attacks, and HTTP(S) proxying via a scriptable module system.
What is an example bettercap command?
A common example is: sudo bettercap -iface eth0 -eval "net.probe on; arp.spoof on" — Discovers hosts and starts ARP spoofing on the LAN.
Is bettercap part of Kali Linux?
Yes. bettercap ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install bettercap.
What category of security tool is bettercap?
bettercap is a Sniffing & Spoofing tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.