Bettercap

The Swiss Army knife for WiFi, Bluetooth Low Energy, wireless HID hijacking, CAN-bus and IPv4 and IPv6 networks reconnaissance and MITM attacks.

Bettercap: Logo

Aby bolo možné pracovať aj s BLE, je potrebné kontajner spustiť s viacerými voľbami:

$ docker container run --rm -it \
    --network host \
    --volume .:/mnt \
    --volume /run/dbus:/run/dbus:ro \
    --cap-add NET_ADMIN \
    --cap-add NET_RAW \
    bletvaska/iotbox

Spustenie

$ bettercap

Základy

Príkaz help zobrazí základy používania nástroja, ako aj zoznam modulov nástroja a ich stav:

>> help
           help MODULE : List available commands or show module specific help if no module name is provided.
                active : Show information about active modules.
                  quit : Close the session and exit.
         sleep SECONDS : Sleep for the given amount of seconds.
              get NAME : Get the value of variable NAME, use * alone for all, or NAME* as a wildcard.
        set NAME VALUE : Set the VALUE of variable NAME.
  read VARIABLE PROMPT : Show a PROMPT to ask the user for input that will be saved inside VARIABLE.
                 clear : Clear the screen.
        include CAPLET : Load and run this caplet in the current session.
             ! COMMAND : Execute a shell command and print its output.
        alias MAC NAME : Assign an alias to a given endpoint given its MAC address.

Modules

      any.proxy > not running
       api.rest > not running
      arp.spoof > not running
      ble.recon > running
             c2 > not running
        caplets > not running
    dhcp6.spoof > not running
      dns.spoof > not running
  events.stream > running
            gps > not running
          graph > not running
            hid > not running
     http.proxy > not running
    http.server > not running
    https.proxy > not running
   https.server > not running
    mac.changer > not running
    mdns.server > not running
   mysql.server > not running
      ndp.spoof > not running
      net.probe > not running
      net.recon > not running
      net.sniff > not running
   packet.proxy > not running
       syn.scan > not running
      tcp.proxy > not running
         ticker > not running
             ui > not running
         update > not running
           wifi > not running
            wol > not running

BLE

Zapnutie skenovania BLE v okolí:

>> ble.recon on

a následne vypnúť ho môžeme príkazom:

>> ble.recon off

Zobraziť zoznam zariadení v okolí:

>> ble.show

Zobrazí charakteristiky BLE zariadenia s danou MAC adresou:

>> ble.enum MAC
> set ticker.commands 'clear; ble.show; events.show 10'
> ticker on

WiFi

> set ticker.commands 'clear; net.show; events.show 10'
> net.probe on
> ticker on

Odkazy