https://cybertoolchain.io/tools/bettercap New releases and features in bettercap, tracked by The Cyber Toolchain. en Mon, 15 Dec 2025 13:28:55 GMT https://github.com/bettercap/bettercap/releases/tag/v2.41.5 https://github.com/bettercap/bettercap/releases/tag/v2.41.5 Mon, 15 Dec 2025 13:28:55 GMT bettercap v2.41.5 adds pcapng capture format, new BLE/LAN/WiFi count APIs, and JS filesystem helpers. • Supports pcapng format for modern, richer packet capture output. • New ble.NumDevices() session variable returns count of discovered BLE devices. • New lan.NumHosts() session variable returns count of discovered LAN hosts. • New wifi.NumAPs() session variable returns count of discovered WiFi access points. • Exposes `BLEDeviceJSON` for external programmatic use. • Adds JS `mkdirAll` function for directory creation in caplets. • Adds JS `appendFile` function for file append operations in caplets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap https://github.com/bettercap/bettercap/releases/tag/v2.41.2 https://github.com/bettercap/bettercap/releases/tag/v2.41.2 Mon, 18 Aug 2025 13:12:21 GMT bettercap v2.41.2 adds default API credentials to simplify initial setup and access control. • Adds default username and password for the REST API to simplify initial setup and access control. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap https://github.com/bettercap/bettercap/releases/tag/v2.41.1 https://github.com/bettercap/bettercap/releases/tag/v2.41.1 Tue, 15 Jul 2025 09:53:33 GMT bettercap v2.41.1 adds packet-manipulation support in proxy plugins, per-interface sniffing, and Wi-Fi channel state reporting. • Passes the queue handle to packet proxy plugins, enabling packet manipulation inside the callback. • Adds `net.sniffer.interface` parameter to sniff traffic from an interface different from the active one. • Wi-Fi module now exposes the current channel in its state output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap https://github.com/bettercap/bettercap/releases/tag/v2.41.0 https://github.com/bettercap/bettercap/releases/tag/v2.41.0 Fri, 31 Jan 2025 11:28:29 GMT bettercap v2.41.0 adds ZeroConf/Bonjour impersonation, DNS-over-TLS proxy, blacklist/whitelist filtering, and scripting API expansions. • New `zerogod` module enables ZeroConf / Bonjour impersonation attacks on local networks. • `api.rest` now returns stdout data after executing a session command, enabling richer programmatic automation. • Adds `addSessionEvent` function to both DNS and HTTP proxy script environments for event-driven scripting. • Adds `removeEventListener` built-in function to scripting environments. • Implements named tickers for more precise, identifiable scheduled script execution. • DNS proxy gains TLS support, allowing interception and inspection of DNS-over-TLS traffic. • DNS proxy adds blacklist and whitelist filtering logic, including wildcard support in blacklist configurations. • DNS proxy supports RFC3597 generic/unknown record types when the `Rdata` field is present. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap https://github.com/bettercap/bettercap/releases/tag/v2.4.0 https://github.com/bettercap/bettercap/releases/tag/v2.4.0 Fri, 13 Sep 2024 11:23:38 GMT bettercap v2.4.0 adds a full CAN-bus module, wifi.bruteforce for Linux/macOS, and new GPS/history controls • New `can` module for CAN-bus recon, injection, fuzzing, filtering, and OBD-II parsing • Adds `can.inject` to inject raw CAN frames onto a bus • Adds `can.fuzz` command with optional size argument to fuzz CAN frame IDs and payloads • Adds `can.filter` to filter captured CAN traffic • Adds `can.dup` and `can.dump.inject` to replay frames from a candump log file • Adds built-in `can.obd2` parser for decoding OBD-II data, including 29-bit identifiers • Implements `wifi.bruteforce` for Linux and macOS (WPA/WPA2 handshake attacks) • Adds `gps.set` command to manually override GPS coordinates without hardware • History file location is now configurable via the `BETTERCAP_HISTORY` environment variable • Embeds the web UI directly into the bettercap binary • Adds new WiFi RSN parsing and additional cipher suites and auth types (including WPA3 identification) • BLE, CAN, HID, and WiFi modules now set a custom shell prompt to reflect active module context • CAN bus state is now exposed in the session JSON object via the API Breaking changes: • The `armhf` build target has been removed and no binary is produced for it in this release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap https://github.com/bettercap/bettercap/releases/tag/v2.33.0 https://github.com/bettercap/bettercap/releases/tag/v2.33.0 Fri, 09 Aug 2024 09:27:00 GMT bettercap v2.33.0 adds NDP ban/router-lifetime controls, new scripting functions, a graph module, and updated MAC vendor data. • Adds `ndp.ban` command to the `ndp.spoof` module for blocking IPv6 neighbor discovery. • Adds `ndp.spoof.router_lifetime` option to control router advertisement lifetimes during NDP spoofing. • Adds `fileExists` function to the session scripting runtime for path-existence checks in caplets. • Adds `saveJSON` function to the session scripting runtime for persisting data as JSON from scripts. • Adds `loadJSON` function to the session scripting runtime for ingesting JSON data in scripts. • Adds `session.stopped` event to the session scripting runtime for lifecycle-aware automation. • Introduces a new experimental `graph` module for visualizing network relationships. • Updates MAC vendor lookup database with latest IEEE datasets for more accurate OUI resolution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bettercap