Sniffing & MITM

Bettercap

Network attack framework for recon, MITM, sniffing, and wireless.

intermediate

Linux

Scanning

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

LAN MITM labs, ARP spoofing demos, Wi-Fi experiments in isolated labs.

Select interface; net.probe; set arp.spoof; net.sniff carefully.

Modern replacement mindset for older ettercap workflows.

Commands & usage

sudo bettercap -iface eth0

net.probe on

set arp.spoof.targets 192.168.1.20

arp.spoof on

net.sniff on

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Responder

LLMNR/NBT-NS/MDNS poisoner that captures NetNTLM hashes on LANs.

Ettercap

Classic suite for MITM attacks on LAN.