macOS
Homebrew已验证 · 100%
brew install bettercaplocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install bettercapMacPorts ports tree · net/bettercap/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Alpine Linux apk已验证 · 92%
sudo apk add bettercapAlpine Linux edge package indexes · bettercap · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install bettercapDebian stable package indexes · bettercap · 来源: deb.debian.org
Nix已验证 · 92%
nix profile install nixpkgs#bettercapnixpkgs package indexes · pkgs/by-name/be/bettercap/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S bettercapArch Linux sync databases · bettercap · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install bettercapopenSUSE Tumbleweed package metadata · bettercap · 来源: download.opensuse.org
概览
软件包摘要
Swiss army knife for network attacks and monitoring
历史
项目历史与用法
bettercap is a Go-based network reconnaissance and attack framework packaged as a command-line tool for security researchers, red teamers, and reverse engineers. Its official description frames it as an all-in-one toolkit for Wi-Fi, Bluetooth Low Energy, HID, CAN-bus, IPv4, and IPv6 reconnaissance and MITM work.
项目历史
The current public repository was created in January 2018 and hosts the Go implementation, documentation links, caplets, modules, tests, and release automation for bettercap 2.x. The project replaced the older single-purpose idea of a LAN MITM helper with a modular framework covering wireless and wired network attack surfaces.
Official release tags show the 2.x line continuing through regular maintenance and feature releases, including v2.40.0 in September 2024, v2.41.0 in January 2025, and v2.41.7 in May 2026.
采用历史
bettercap became a common package-manager install for offensive-security labs because it combines sniffing, spoofing, Wi-Fi handshakes, BLE enumeration, packet/protocol proxies, and a REST/web UI under one executable. Homebrew, Debian/Ubuntu, Arch, Alpine, Nix, MacPorts, and openSUSE packaging in the input reflects that cross-platform adoption.
The GitHub repository's large star and fork counts, Docker image badge, and active release stream indicate that bettercap is used beyond macOS packaging: it is a standard tool people expect to be available in disposable lab machines, containers, and security-focused Unix environments.
使用方式
Users typically run bettercap interactively or with caplets to discover hosts, inspect traffic, run spoofers, capture Wi-Fi handshakes, enumerate BLE devices, or script network experiments. Its official docs emphasize an interactive session workflow and module-driven operation rather than a single fire-and-forget scan command.
Because the tool performs real attack and monitoring functions, its practical use belongs in authorized security testing, lab networks, red-team exercises, and research settings.
为什么软件包爱好者会关心
bettercap is package-nerd interesting because it is one of the few security CLI packages that collapses many historically separate tools into one Go binary with modules, a web UI, REST API, caplets, and packaged defaults. It sits at the intersection of classic Unix networking tools, wireless security suites, and modern self-contained Go distribution.
For Homebrew-style package history, bettercap also illustrates how offensive-security tooling moved from language/runtime-heavy installs toward portable binaries that can be installed quickly on a laptop, container, or lab host and then extended with scripts and modules.
时间线
- 2018: Current bettercap/bettercap GitHub repository created for the Go-based 2.x project.
- 2024: v2.40.0 released, showing the mature 2.x line still receiving updates.
- 2025: v2.41.0 released.
- 2026: v2.41.7 published in May, with repository activity continuing in June.
Related projects
- Related tools include Wireshark and tcpdump for packet inspection, aircrack-ng for Wi-Fi security workflows, mitmproxy for programmable proxying, nmap for network discovery, and ettercap as an older MITM-oriented tool whose niche bettercap partly modernized.
来源
安全态势
风险级别：red
network interception and offensive security tool.
风险分类器
red 风险 · 高 置信度 · escape-surveillance-offensive
原因
- network interception and offensive security tool
信号
- override:bettercap
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 6 个平台目标。
- 安装时包含 1 个运行时依赖。
- 构建元数据列出 2 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/bettercap.env
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
bettercap | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-25
管理器版本2.41.7
管理器更新时间2026-07-15
本地数据OK
上游当前
检测到的最新版本v2.41.7
https://github.com/bettercap/bettercap
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:bettercap |
|---|---|
| 版本 | 2.41.7 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/bettercap |
| 主页 | https://www.bettercap.org/ |
| 仓库 | https://github.com/bettercap/bettercap |
| 上游文档 | https://www.bettercap.org/ |
| 许可证 | GPL-3.0-only |
| 源码归档 | https://github.com/bettercap/bettercap/archive/refs/tags/v2.41.7.tar.gz |
| 最后更新 | 2026-07-15T21:02:52-04:00 |
| Pulse | updated |
| 依赖 | libusb |
| 构建依赖 | go, pkgconf |
| macOS 提供的库 | libpcap |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
| 注意事项 | bettercap requires root privileges so you will need to run `sudo bettercap`. You should be certain that you trust any software you grant root privileges. |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | bettercap |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
bettercap 2.33.0-1+b9
Complete, modular, portable and easily extensible MITM framework
sudo apt install bettercap- Section: net
- Architecture: amd64
- Source Package: bettercap
- 8 依赖
- 1 可选依赖
- normalized package name match
- 匹配方式：Bettercap
Nix95%
bettercap
nix profile install nixpkgs#bettercap- normalized package name match
- 匹配方式：Bettercap
Ubuntu apt95%
bettercap 2.32.0-2build3
Complete, modular, portable and easily extensible MITM framework
sudo apt install bettercap- Section: universe/net
- Architecture: amd64
- 8 依赖
- normalized package name match
- 匹配方式：Bettercap
apk95%
bettercap 2.41.7-r0
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
sudo apk add bettercap- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: bettercap
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Bettercap
apk95%
bettercap-doc 2.41.7-r0
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks. (documentation)
sudo apk add bettercap-doc- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: bettercap
- normalized package name match
- 匹配方式：Bettercap
pacman95%
bettercap 2.41.7-1
Swiss army knife for network attacks and monitoring
https://github.com/bettercap/bettercap
sudo pacman -S bettercap- License: GPL-3.0-only
- Architecture: x86_64
- 8 依赖
- 1 可选依赖
- normalized package name match
- 匹配方式：Bettercap
zypper95%
bettercap 2.41.7-1.1
Swiss army knife for network attacks and monitoring
sudo zypper install bettercap- License: GPL-3.0-or-later
- Category: Productivity/Networking/Diagnostic
- Architecture: x86_64
- Source Package: bettercap
- 3 依赖
- 1 提供
- normalized package name match
- 匹配方式：Bettercap
MacPorts95%
bettercap
sudo port install bettercap- normalized package name match
- 匹配方式：Bettercap
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment