Bettercap

Bettercap is a comprehensive, powerful network attack tool that supports advanced man-in-the-middle attacks. In the case of session hijacking, Bettercap can intercept traffic on the network, including cookies or authentication tokens exchanged between a client and server. By using Bettercap’s capabilities to modify or inject traffic, an attacker can steal session tokens, which can then be used to hijack the session. Bettercap also allows for SSL/TLS interception (SSL stripping), which can be useful if the traffic is encrypted, but not securely (e.g., weak HTTPS configurations).

Usage :

  • Setting up the network interface

 bettercap -iface eth0
  • We will start sending probe packets using following commands

net.probe on
net.recon on
net.sniff on

Last updated