Ravi Sir's Cyber Security Cards › Revision Cards
Bettercap: Network Recon and MITM (Lab)
Bettercap: Network Recon and MITM (Lab) Bettercap is a tool for network recon and man-in-the-middle (MITM) tests, like ARP spoofing. Lab only. It sends fake “I am the gateway” messages, so the victim’s traffic passes through the attacker. HTTPS everywhere + HSTS (never ignore certificate warnings).
Read card text
What this card says
What it is
Bettercap is a tool for network recon and man-in-the-middle (MITM) tests, like ARP spoofing.
Lab only.
How ARP spoofing works
It sends fake “I am the gateway” messages, so the victim’s traffic passes through the attacker.
Defence
HTTPS everywhere + HSTS (never ignore certificate warnings).
Network segmentation and Dynamic ARP Inspection on managed switches.
Learn more in the lesson: 36.5 Bettercap: Network Recon and MITM (Lab)