Hack Forums
Help with bettercap - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Help with bettercap (/showthread.php?tid=6220269)



Help with bettercap - colbsgotguap - Sep 8, 2022

Having trouble with bettercap. I set up my rougueAP and am trying to see the traffic of clients. I've looked at the usage with the help command and have been reading online bet still can't figure out how to start it with -X
i run this

sudo bettercap -X -I wlan0 -S NONE --no-discovery --proxy --no-sslstrip

and get this

flag provided but not defined: -X

also if someone could tell me how to post code on this forum that would be great🙄


RE: Help with bettercap - Beladonis - Sep 8, 2022

What if you use --sniffer instead, and at the end of the command?


RE: Help with bettercap - colbsgotguap - Sep 8, 2022

(Sep 8, 2022 01:06 PM)Beladonis Wrote:  What if you use --sniffer instead, and at the end of the command?

still the same error but instead -I for the interface
Did they update bettercap? I used to do this and it would work


RE: Help with bettercap - DramaKing - Sep 9, 2022

Use sudo bettercap -i wlan0mon. At the interactive prompt, use net.sniff on. I would also put your adapter into promiscuous mode.

Let me know if it works because I've only had success in conjunction with the arp.spoof module.


RE: Help with bettercap - colbsgotguap - Sep 9, 2022

(Sep 9, 2022 11:40 AM)DramaKing Wrote:  Use sudo bettercap -i wlan0mon. At the interactive prompt, use net.sniff on. I would also put your adapter into promiscuous mode.

Let me know if it works because I've only had success in conjunction with the arp.spoof module.

Do you know a way to filter the results to just what's on my rougueAP? I set net.sniff.local to true but I still pick up every phone computer and gaming console around me, it's too much to sort through lol..


RE: Help with bettercap - DramaKing - Sep 9, 2022

(Sep 9, 2022 01:05 PM)colbsgotguap Wrote:  Do you know a way to filter the results to just what's on my rougueAP? I set net.sniff.local to true but I still pick up every phone computer and gaming console around me, it's too much to sort through lol..

Can't find a way to output a .pcapng, but I'm having trouble picturing what's happening. Is the rogue AP on your local machine? I would expect it to need to be in monitor/AP mode and have exclusive access to the NIC if that was the case.


RE: Help with bettercap - colbsgotguap - Sep 9, 2022

(Sep 9, 2022 02:14 PM)DramaKing Wrote:  Can't find a way to output a .pcapng, but I'm having trouble picturing what's happening. Is the rogue AP on your local machine? I would expect it to need to be in monitor/AP mode and have exclusive access to the NIC if that was the case.

yes it is, and yes it's in monitor mode


(Sep 9, 2022 02:24 PM)shatter Wrote:  reading this whole thread was pretty lol


haha --no-sslstrip

I guess it is 🙄