BetterCap

Copyleft of Simone 'evilsocket' Margaritelli.
http://www.evilsocket.net/

---

BetterCap is an attempt to create a complete, modular, portable and easily extensible MITM framework with every kind of features could be needed while performing a man in the middle attack.

This software is currently alpha stage, its usage is not recommended unless you really know what you are doing.

TODO

• FIXES

  • Whole subnet will take a lot of time due to arp packets needed to get hardware addresses.

• General

  • Implement abstraction interfaces.
  • Support multiple targets at once.
  • Auto host discovery/scanning and auto add.
  • HTTP modular transparent proxy with plugins.

• Firewalling

  • Implement Firewall class for OS X.
  • Implement Firewall class for GNU/Linux.
  • Traffic redirection feature.

• Spoofers

  • ARP spoofer.
  • ICMP spoofer.
  • ICMP6 spoofer.

MODULES

• ARP: module for arp poisoning (default)
• INFOTARGET: module for get info from targets like vendor,os and open ports using nmap.

DEPENDS

• colorize (gem install colorize)
• packetfu (gem install packetfu)
• pcaprub (gem install pcaprub) [sudo apt-get install ruby-dev libpcap-dev]