Getting better – scanning, sniffing, and spoofing with BetterCAP

We can get started and grab BetterCAP on Kali very easily as it’s in the repository:

# apt-get install bettercap

Back in my day, the legacy BetterCAP used a command-line interface. Now, there’s a very slick web interface to bring sniffing and spoofing into the current century. As with any locally hosted web interface, you’ll want to be aware of the credentials that are used for logging in. Grab nano and configure the HTTP caplet at /usr/share/bettercap/caplets/http-ui.cap:

Figure 3.17 – Configuring the HTTP UI

Take a Break from the Command Line

Once you’ve logged in with the HTTP UI, you can modify any caplet parameters from there, including the username and password specified here.

Now, let’s get this party started by running the bettercap –caplet http-ui command. Then, you can fire up your browser and head on over to your localhost...