# 🕵️‍♀️ **Bettercap Cheatsheet** 🕵️

Bettercap is an indispensable tool for network reconnaissance, sniffing, and executing Man-In-The-Middle (MITM) attacks on local networks.

---

## Table of Contents

1. [🔍 Network Reconnaissance](#-network-reconnaissance)
2. [🥷 ARP Spoofing](#-arp-spoofing)
3. [📡 Network Sniffing](#-network-sniffing)  
4. [🕸 Web Proxy](#-web-proxy)
5. [🚦 TLS Proxy](#-tls-proxy)
6. [🌀 DNS Spoofing](#-dns-spoofing)
7. [💻 HTTPS & HSTS Bypass](#-https--hsts-bypass)
8. [📌 Miscellaneous Commands](#-miscellaneous-commands)

---

## 🔍 **Network Reconnaissance**

- `net.probe on` 👀

- Initiate an ARP scan to discover live hosts on the network.

- `net.show` 📡  

- Display detected devices on the network, complete with IPs, MAC addresses, and other details.

- `net.recon on/off` 🕵️‍♂️

- Enable/disable passive network traffic analysis to discover hosts.

---

## 🥷 **ARP Spoofing** 

- `set arp.spoof.targets [IP]` ✨

- Designate a target IP for ARP cache poisoning to reroute its traffic.

- `arp.spoof on/off` 💥

- Engage/disengage ARP spoofing against the chosen target. 

- `set arp.spoof.internal true` 🔁

- Poison ARP caches for all connections between internal hosts on the LAN.

---

## 📡 **Network Sniffing**

- `net.sniff on/off` ▶️⏸️

- Begin/halt packet capture to log network traffic.

---

## 🕸 **Web Proxy**

- `set proxy.port [PORT]` 🤖

- Assign the listening port for the proxy server.

- `proxy on/off` 🎚️🛑

- Activate/deactivate the proxy server to intercept and manipulate HTTP requests.

---

## 🚦 **TLS Proxy** 

- `tls.proxy on/off` 🔓🔒

- Enable/disable the TLS proxy. This intercepts and decrypts HTTPS traffic by mimicking certificate validation.

---

## 🌀 **DNS Spoofing**

- `set dns.spoof.domains [DOMAIN]` 🌐

- Select a domain for DNS hijacking.  

- `dns.spoof on` 🥷

- Activate DNS response spoofing for the specified domain.

---

## 💻 **HTTPS & HSTS Bypass**

- `hstshijack.load` 🛡️

- Load the module to overcome HSTS, a web security protocol, useful for exploiting HTTPS sites.

---

## 📌 **Miscellaneous Commands**

- `events.clear` 🧹

- Wipe out all recorded network events.

- `set [OPTION] [VALUE]` ⚙️

- Adjust configuration options to suit your needs.

- `help` ❓

- Display the help menu with an overview of commands.

---