name: bettercap
category: wireless
description: Swiss army knife for network attacks and monitoring.
keywords:
  - mitm
  - arp
  - wifi
  - sniff
  - spoof
  - network

parameters:
  interface:
    type: string
    flag: "-iface"
    description: Network interface

  caplet:
    type: string
    flag: "-caplet"
    description: Caplet script to run

  eval:
    type: string
    flag: "-eval"
    description: Commands to evaluate

  gateway:
    type: string
    flag: "-gateway.address"
    description: Gateway IP override

  target:
    type: string
    flag: "-target"
    description: Target IP/MAC

  silent:
    type: boolean
    flag: "-silent"
    description: Suppress output

  no_history:
    type: boolean
    flag: "-no-history"
    description: Disable history

requires_root: true
timeout: 0
interactive: true

examples:
  - "bettercap -iface eth0"
  - "bettercap -iface wlan0 -caplet wifi.cap"
  - "bettercap -iface eth0 -eval 'net.probe on; net.sniff on'"
  - "bettercap -caplet http-ui"

notes: |
  Modules:
  - net.probe: Host discovery
  - net.sniff: Packet sniffing
  - arp.spoof: ARP spoofing
  - dns.spoof: DNS spoofing
  - wifi: Wireless attacks
  - ble: Bluetooth attacks
  - hid: USB HID attacks

  Common commands:
  - help module.name
  - net.recon on
  - net.probe on
  - arp.spoof on
  - set arp.spoof.targets IP

  Web UI:
  - http-ui caplet
  - Access via browser
  - Visual controls

  Caplets:
  - Pre-made scripts
  - /usr/share/bettercap/caplets/