Alternatives to bettercap

Network reconnaissance and man-in-the-middle testing framework. The listings below can replace it for an important use case. Each note says what changes if you switch.

The original

Replacements

Listings that take over the same core job as bettercap.

  • Responder

    LLMNR, NBT-NS and mDNS testing tool for internal network assessments.

    Responder focuses on LLMNR, NBT-NS and mDNS poisoning with rogue authentication servers on Linux, and does not cover Wi-Fi, Bluetooth or CAN bus reconnaissance.

  • mitmproxy

    An intercepting proxy that decrypts, displays and lets you modify HTTP and HTTPS traffic, with a console, a web interface and a scriptable command-line version.

    mitmproxy concentrates on intercepting and modifying HTTP and HTTPS traffic with console, web and Python scripting interfaces, but lacks bettercap's wireless and network-layer reconnaissance.

  • Aircrack-ng

    Assess wireless network security with a suite of command-line tools.

    Aircrack-ng is a command-line wireless security suite for packet capture and adapter testing rather than a broad multi-protocol framework.

  • Kismet

    Wireless detector, sniffer and intrusion detection system for Wi-Fi, Bluetooth and RF.

    Kismet passively sniffs Wi-Fi, Bluetooth and RF as an intrusion detection system, on Linux only.

Also worth comparing

These listings name bettercap as their own alternative, so the relationship runs both ways.

  • airgeddon

    Menu-driven wireless auditing script for Linux.

    bettercap is a broader reconnaissance and man-in-the-middle framework covering Wi-Fi, Bluetooth Low Energy, CAN bus and Ethernet, and it runs on Windows, macOS and Linux.

Similar software

Related functionality, not a direct replacement.