Sep 8, 2022 12:54 PM
(This post was last modified: Sep 8, 2022 12:58 PM by colbsgotguap.)
Having trouble with bettercap. I set up my rougueAP and am trying to see the traffic of clients. I've looked at the usage with the help command and have been reading online bet still can't figure out how to start it with -X
i run this
sudo bettercap -X -I wlan0 -S NONE --no-discovery --proxy --no-sslstrip
and get this
flag provided but not defined: -X
also if someone could tell me how to post code on this forum that would be great🙄
What if you use --sniffer instead, and at the end of the command?
Sep 8, 2022 01:24 PM
(This post was last modified: Sep 8, 2022 01:25 PM by colbsgotguap.)
(Sep 8, 2022 01:06 PM)Beladonis Wrote: What if you use --sniffer instead, and at the end of the command?
still the same error but instead -I for the interface
Did they update bettercap? I used to do this and it would work
Use sudo bettercap -i wlan0mon. At the interactive prompt, use net.sniff on. I would also put your adapter into promiscuous mode.
Let me know if it works because I've only had success in conjunction with the arp.spoof module.
(Sep 9, 2022 11:40 AM)DramaKing Wrote: Use sudo bettercap -i wlan0mon. At the interactive prompt, use net.sniff on. I would also put your adapter into promiscuous mode.
Let me know if it works because I've only had success in conjunction with the arp.spoof module.
Do you know a way to filter the results to just what's on my rougueAP? I set net.sniff.local to true but I still pick up every phone computer and gaming console around me, it's too much to sort through lol..
(Sep 9, 2022 01:05 PM)colbsgotguap Wrote: Do you know a way to filter the results to just what's on my rougueAP? I set net.sniff.local to true but I still pick up every phone computer and gaming console around me, it's too much to sort through lol..
Can't find a way to output a .pcapng, but I'm having trouble picturing what's happening. Is the rogue AP on your local machine? I would expect it to need to be in monitor/AP mode and have exclusive access to the NIC if that was the case.
Sep 9, 2022 03:38 PM
(This post was last modified: Sep 9, 2022 03:41 PM by colbsgotguap.)
(Sep 9, 2022 02:14 PM)DramaKing Wrote: Can't find a way to output a .pcapng, but I'm having trouble picturing what's happening. Is the rogue AP on your local machine? I would expect it to need to be in monitor/AP mode and have exclusive access to the NIC if that was the case.
yes it is, and yes it's in monitor mode
(Sep 9, 2022 02:24 PM)shatter Wrote: reading this whole thread was pretty lol
haha --no-sslstrip
I guess it is 🙄
|
