bettercap/bettercap

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

19865 stars · 1713 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, wireless HID devices, CAN-bus, and IPv4/IPv6 Ethernet networks. It is extensible with modules and a web UI, targeting security researchers, red teamers, and reverse engineers.

Use cases

• perform wifi reconnaissance and deauthentication attacks
• capture wpa2 handshakes and pmkid hashes
• run a man-in-the-middle attack on a local network
• sniff bluetooth low energy devices
• hijack wireless hid devices like mice and keyboards
• set up a rogue access point
• probe and spoof can-bus traffic in vehicles

When to choose

• you need an all-in-one toolkit for wifi, BLE, HID, and CAN-bus attacks
• you are doing red team engagements or wireless security assessments
• you want an extensible framework with modules and a web UI instead of separate single-purpose tools

When to avoid

• you only need passive network monitoring without attack capabilities
• you need a purely defensive IDS or vulnerability scanner
• you cannot get hardware access, since modules like wifi.recon require direct radio access

Facets

cli-tool · maturity active

security penetration-testing networking proxy monitoring cli security penetration-testing networking windows bsd go cli wifi mitm bluetooth-low-energy ble hid can-bus deauthentication rogue-ap pmkid wpa2 red-team sniffing spoofing reconnaissance mousejack command-line linux macos android docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bettercap/bettercap")