The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks - made with ❤️ by @evilsocket
Joined January 2016
- Tweets652
- Following2
- Followers15.6K
- Likes248
bettercap retweeted
Yesterday night I left Kimi K3 with a monitor WiFi interface and root access. This morning I woke up to a new way to bruteforce WEP, WPA2-PSK and WPA3-SAE even if the card does not send ACKs in monitor mode. And found that WPA3 is much faster to bruteforce than WPA2 :D
bettercap retweeted
"All combined, the above techniques enable an adversary to restore MitM capabilities even in the face of client isolation." 🔥
We found that Wi-Fi client isolation can often be bypassed. This allows an attacker who can connect to a network, either as a malicious insider or by connecting to a co-located open network, to attack others.
NDSS'26 paper: ndss-symposium.org/wp-conten…
GitHub: github.com/vanhoefm/airsnitc…
bettercap retweeted
What if you glue together (free) AI, torrents, a torrent search engine, telegram and your movies history? Freeflix! An AI that knows your tastes, recommends and searches movies, TV shows and more, then downloads them, from your terminal or (remotely) via Telegram.
bettercap retweeted
From legacy WEP to WPA3-Enterprise: sharing our recent #WiFi field experiences. 📡
We detail various scenarios to better understand the risks, including WPA3 PEAP relaying & optimized online PSK brute-forcing.
⤵️ synacktiv.com/en/publication…
bettercap retweeted
150 days after initial disclosure, here is the writeup (link in the comments to make the algo happy).
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
bettercap retweeted
Any Kali Linux maintainer that can help with getting Legba packaged? DEB and dependency-free MUSL precompiled binaries already available. It should be super easy.
bugs.kali.org/view.php?id=86…
bettercap retweeted
Legba v1.1.0 is out! 🥳This is a major release that required a significant amount of (human) effort, bringing several key improvements that deserve individual attention. 🧵👇
bettercap retweeted
Tomorrow Arcadia turns 1 🥳🎂
A Discord realm of 3000+ minds, open source devs, hackers, artists, thinkers.
Born from curiosity. Fed by code. Haunted by beauty. If you belong nowhere but crave everything, join us.
🜁 discord.com/invite/btZpkp45g…
bettercap retweeted
auditor: umm... why is the QA team using @bettercap ?
me: because it's amazing when you need to shape and intercept network traffic?
auditor: it's an attacker tool!
me: meh. all depends who and how it's being used. YOLO.
auditor: that's against a standard
me: oh, which one?
bettercap retweeted
New blog post exploring agents, AI, Nerve, and my latest adventures in the world of agent-based systems.
evilsocket.net/2025/03/13/Ho…
bettercap retweeted
go install github.com/bettercap/betterc… && sudo bettercap -eval 'zerogod.discovery on'
bettercap retweeted
Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI
evilsocket.net/2024/09/13/In…
bettercap retweeted
bettercap can now read CAN frames from a candump log, replay them to the /dev/can interface, decode them with any given DBC definition (which includes OBD-II PIDs) and generate new ones from the DBC for fuzzing 🥷🚘🛻
bettercap retweeted
Next bettercap release will feature a new CAN module that'll allow to decode frames from the wire given a DBC file, discover nodes, inject manually crafted frames and fuzz by creating randomized ones! Any ideas about what'd be needed in a CAN-bus / ICS tool are more than welcome.
bettercap retweeted
CVE-2021-21571 + (CVE-2021-21572 || CVE-2021-21573 || CVE-2021-21574) = RCE at the BIOS level via MITM attack 🔥🔥🔥 most likely even just CVE-2021-21571 is enough
BIOSConnect feature of #Dell systems contains multiple high-risk vulnerabilities that could lead to the execution of arbitrary code at the BIOS /UEFI level.
Read: thehackernews.com/2021/06/bi…
At least 128 Dell laptop, desktop and tablet models are affected by this issue.
bettercap retweeted
Open sourced my Maltego (@MaltegoHQ) integration for @evilsocket's ditto tool and wrote a blogpost about it: dreadl0ck.net/posts/ditto-tr…
Happy graphical link analysis! #madewithmaltego #golang #ditto