BetterCAP Installation Guide: Step-by-Step Instructions

Opening the realm of network penetration testing, monitoring, and manipulation is BetterCAP, a robust and adaptable utility. Its broad spectrum of capabilities for scrutinizing and engaging with network traffic serves as a testament to its power, but what sets it apart is its unique concept of 'caplets'. Beyond this mere introduction, BetterCAP finds its significance in practical applications, bringing about impactful changes in the global sphere of network penetration testing and manipulation. Hence, ushering in an era of advanced management of network traffic, making for an enthralling prospect for our readers.

Caplets in BetterCAP are small, reusable scripts or modules written in the Ruby programming language. They allow you to extend and customize the functionality without modifying its core code.

Caplets are used to automate various tasks, perform specific attacks or manipulations, and enhance the tool’s overall capabilities. They are essentially plugins or extensions that can be loaded to add specific functionalities.

BetterCAP manifests itself as a 'Swiss Army knife' when switched on to WiFi, Bluetooth Low Energy, wireless HID hijacking, and reconnaissance of IPv4 and IPv6 networks, along with MITM attacks. Its multifaceted nature brings to the fore a host of utilities, making it a highly sought-after tool in the relevant industries.

What is BetterCAP?

BetterCAP is a powerful security tool developed to audit the security of wireless networks. It offers the ability to sniff network packets and supports various types of attacks and scanning activities like DNS spoofing, man-in-the-middle (MiTM) attacks, ARP spoofing, and other network intrusion techniques.

Main Features

In the forthcoming sections, we will delve into the core features of BetterCAP, providing an in-depth understanding of what you, as a user, can expect and utilize to the maximum extent.

• WiFi networks scanning, de-authentication attack, clientless PMKID association attack, and automatic WPA/WPA2 client handshake capture.
• Bluetooth Low Energy devices scanning, characteristics enumeration, reading, and writing.
• 2.4Ghz wireless devices scanning and MouseJacking attacks with over-the-air HID frames injection (with DuckyScript support).
• Passive and active IP network hosts probing and recon.
• ARP, DNS, DHCPv6, and NDP spoofers for MITM attacks on IPv4 and IPv6-based networks.
• Proxies at packet level, TCP level, and HTTP/HTTPS application level are fully scriptable with easy-to-implement javascript plugins.
• A powerful network sniffer for credentials harvesting which can also be used as a network protocol fuzzer.
• A very fast port scanner.
• A powerful REST API with support for asynchronous events notification on web socket to orchestrate your attacks easily.
• An easy-to-use web user interface.
• More!

Step 1: Setting Up Your Raspberry Pi for BetterCAP

The preliminary step towards BetterCAP installation is ensuring your Raspberry Pi is up-to-date. By keeping your OS packages current, you create an optimal environment for BetterCAP to function at its best. Start the process with this terminal command:

sudo apt-get update && sudo apt-get -y upgrade

Activate Bluetooth on RPI4

kali@kali:~$ sudo systemctl enable --now hciuart.service
kali@kali:~$ sudo systemctl enable --now bluetooth.service

2. Installing the Essential Dependencies for BetterCAP

Dependencies are pieces of software that BetterCAP needs to run effectively on your Raspberry Pi. They ensure that BetterCAP can utilize the full spectrum of its capabilities.

• build-essential
• libpcap-dev
• libusb-1.0-0-dev (required by the HID module)
• libnetfilter-queue-dev (on Linux only, required by the packet.proxy module)

sudo apt update
sudo apt install golang git build-essential libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev

Step 3: A Comprehensive Guide to Installing BetterCAP

First, we will install it from Git Hub, and after that all necessary dependencies.

sudo apt install bettercap

Compile from Source

go get github.com/bettercap/bettercap
cd $GOPATH/src/github.com/bettercap/bettercap

make build
sudo make install

Step 4: Keeping Your Caplets Updated for Optimal Performance

sudo apt-get install bettercap-caplets

sudo bettercap -eval "caplets.update; q"

Step 5: Navigating Through BetterCap's Web User Interface (WebUI)

sudo bettercap -eval "ui.update; q"

Configure Login

sudo vi /usr/local/share/bettercap/caplets/https-ui.cap

sudo bettercap -caplet https-ui

Generate a certificate for Web-Gui

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out bettercap-https.cert -sha256 -days 3650 -nodes -subj "/C=XX/ST=Oporto/L=Oporto/O=OffensiveWireless/OU=RFS/CN=kali"

Before wrapping up, we would like to guide you to the official BetterCAP website. For your ease, we have revisited and expanded on some salient features in a more comprehensive manner:Scanning, enumeration, reading and writing characteristics of Bluetooth low energy devices.
Conducting reconnaissance and mitm attacks on ipv4 and ipv6 networks.
Understanding proxies at packet level, tcp level, and application level(http,https).
Capturing WPA/WPA2 client handshakes.

sudo bettercap --help
Usage of bettercap:
  -autostart string
        Comma separated list of modules to auto start. (default "events.stream")
  -caplet string
        Read commands from this file and execute them in the interactive session.
  -caplets-path string
        Specify an alternative base path for caplets.
  -cpu-profile file
        Write cpu profile file.
  -debug
        Print debug messages.
  -env-file string
        Load environment variables from this file if found, set to empty to disable environment persistence.
  -eval string
        Run one or more commands separated by ; in the interactive session, used to set variables via command line.
  -gateway-override string
        Use the provided IP address instead of the default gateway. If not specified or invalid, the default gateway will be used.
  -iface string
        Network interface to bind to, if empty the default interface will be auto selected.
  -mem-profile file
        Write memory profile to file.
  -no-colors
        Disable output color effects.
  -no-history
        Disable interactive session history file.
  -pcap-buf-size int
        PCAP buffer size, leave to 0 for the default value. (default -1)
  -script string
        Load a session script.
  -silent
        Suppress all logs which are not errors.
  -version
        Print the version and exit.