hacking every device on local networks - bettercap tutorial (Linux)

[@nourtechtalk]

Lets play a game: Can you spot and map all the blurred out mac addresses in the video? Hint: The last letter is visible from the first blur. Note: I have regenerated all of them so its alright 😉

[@theguywithnoname4745]

Wait wdym bro?

[@johannesjoestar]

Aren't they basically visible on the very same blurred frame, logged right above the table? "...endpoint detected as ..."?

[@cynagen]

​​@@johannesjoestar came here to say, the MAC addresses are still exposed in the initial logs when they scanned the network but blurred out most others

[@brandolinocaston]

Ok, please show me how to change MAC on your blurred Alpha wlan0 Adapter with 00:c0:ca:af:ff:0e MAC :)

[@gangbang7354]

I don't see my icon /wifi sign/ why? help me my laptop is connected wirelessly but still giving me ethernet by which i cant continuing my efforts plz

[@griq]

I think it’s safe to assume that every video that says “educational purposes” are mostly used for unethical purposes. Good to see how it’s done so I can better protect myself. Thank you sir

[@TidanOfc]

"Good to see how it’s done so I can better protect myself. Thank you sir" this quote alone makes everything you said previously, sound kinda stupid.

[@marcorodrigues8303]

Sim Fui

[@RakibHasan-hs1me]

Trust me, when they mention educational purposes it means it's actually worthless. You have either own something expensive along with it or find a new work way around to use the and get the job done.

[@sazzy94]

he is gonna do something illegal@@TidanOfc

[@hamzazaman18]

well it winds up everyhting lol@@TidanOfc

[@razorwire111]

I like how you put everything together from attack to mitigation tactics.

[@sinisterz3r090]

I can also turn off my computer! no more attacks!

[@PixelOtter0813]

In the end i thought he was pulling a nord sponsorship lmao , really useful info thanks

[@user-gr4vx8xz1l]

I didn’t see anyone mention in the comments this but most routers now a days have the option to setup a guess network that is separate from your network. You could also just create another VLAN for the guest network as well. Also VPN traffic isn’t secure either your traffic is passing through the servers that the vpn is hosted on. Sopeople need to choose vpns with good reputations and not some of the free vpns. Or create their own vpn. Great video though just wanted to add that bit for people.

[@sethadkins546]

The use of a VPN here was to ensure traffic going across the LAN was secure, not across the internet (as you said at that point you're trusting the VPN provider). Within that context, you can consider it "secure" since it cannot be accessed by attackers.

[@Allinone-sh6cj]

How to make own vpn?

[@cde-lf7iu]

Very very very good explanation, very detailed and straight to the point we all want. Excelent. Thank you

[@VioFax]

too bad the next video got removed :(

[@khusham6216]

@@VioFax can you brief it if you've watched it? I would love to know about how to create my own vpn.Thanks

[@rajmodi4145]

bhai muje sikhaoge kese krna he

[@rajmodi4145]

bhai me kisi wifi se connected hu usne speed limit kri huyi he 1mbps ki ese me ke increase kru yr ba do

[@op_bill641]

I just learned how to do this and im so (negatively) amazed at how easy it is for someone in your network to spy on your device

[@robot67799]

I like how your video is straight to the point

[@BrianMeyers-yl3om]

Very clear and no b.s. Thank you! subscribed!

[@rajmodi4145]

bhai me kisi wifi se connected hu usne speed limit kri huyi he 1mbps ki ese me ke increase kru yr ba do

[@kiaraki7186]

@@rajmodi4145 router ka admin password hai?

[@markb4168]

agreed

[@dha12oks]

Thanks for the video, I'm actually studying at the moment for Cyber Security, and this is a bit of an eye opener towards what I would be going against.

[@visual975]

great video would love to see more of these sorts, earned yourself a new sub! :)

[@ghaithshaqra4100]

quick direct and focusing on the details very good bro i will keep watching your new videos 😊

[@rajmodi4145]

bhai me kisi wifi se connected hu usne speed limit kri huyi he 1mbps ki ese me ke increase kru yr ba do

[@prozacgodgamedev]

Correction, you're not seeing all URLS' you're seeing the domain names, with a uri/url slapped on the front of it, to see the whole url, you'd need to see inside the http packet, which you can't because they're all using SSL.

[@Log.Rhythm]

Came to say this! Fear mongering 🙄

[@prozacgodgamedev]

@@Log.Rhythm A lot of this video felt like fear mongering. It wasn't 'that' factually incorrect in the technical side of things, it was just ... not telling the whole story. It's another (in large print) "Look at all the things hackers can do to you!" (and in the small print, whispering) "...when you give them access to your computer or network" I mean, sure with DNS leakage someone might know you're on porn hub, but they won't know the particular degeneracy you're up to.

[@willyv374]

Ye all those ebay hackers, with their GitHub tools 😂😂😂 this video ist only useful for elders, who don't have a fcking clue at all

[@andrestorres7343]

Furthermore, even if you are spoofing the DNS requests, you will see a not secure message in the browser (not secure 🔐) as there would be a mismatch in the certificate for the domain...

[@PineCoffee]

Yeah this technique would work well probably in the 2000s and earlier, when most websites are still on http, not https, and browser security was crap back then. It is pretty much useless today.

[@szdavee92]

I think you forget to mention that if a site uses HTTPS you can't see the data just the target IP. If you using a dns spoofing attack you will se nothing because the HSTS kick in. Also u can't inject nothing to site which using HTTPS because the whole http request including the header is encrypted.

[@nourtechtalk]

Very true but you can also downgrade the connection to http and enjoy the show 😁

[@mathiasdeweerdt1400]

@@nourtechtalk Any modern, respected website will not allow this. HSTS will prevent exactly this.

[@ZK-du3pj]

@@nourtechtalk HSTS is impossible to downgrade down to http.

[@Bluexin_]

@@nourtechtalk tbh after enabling the https everywhere plugin I started to notice way more how many websites still don't support https. Even govt websites over here 😅 that plugin is a godsend, don't even need to rely on the website maintainers to enable hsts

[@johnsailor3590]

He did not forget it, a video saying it does not really work won’t be viral

[@kestonsmith1354]

How you think celebs private photos get hacked and leaked, it's most of the time someone with a expensive wifi adapter, aircrack-ng, hashcat and an excellent word list, bettercap and beef .

[@thevault1575]

lol no. most celebs got their photos leaked bc they did not secure their icloud. if someone cracks their icloud, they can get access to all their icloud photos.

[@kestonsmith1354]

@@thevault1575 not true, you need to their real verified email which is not public information and very hard to acquire. Once you get onto someone's network you can record anything , see which sites they are visiting, capture their passwords, etc. Once you gather the information, it can be sold to the media and other sources for a pretty penny.

[@thevault1575]

@@kestonsmith1354 Yes it is true... Back in 2014 there was an “event” called “the fappening”. What happened was celebrates photos and videos got leaked and posted onto 4chan & reddit. This was all possible bc of icloud. I agree with you that it would be hard for someone to get a celebs personal email but people are very good at social engineering! From opendatasecurity: “In 2014 there was a massive leak of intimate photographs of famous people that was called the Fappening movement or “Celeb Gate”. How did it happen? By the Apple cloud storage service: iCloud.” I would include the link to the article but I don’t think youtube allows that. Just look up the fappening. It all happened because of icloud.

[@kestonsmith1354]

@@thevault1575 For the first one, back in 2014, Facebook were very vulnerable to hacks through their login system , it was easy to break into people's accounts. The second one in 2017, how was he able to get hold of their email addresses ..unless they were already part of the a list of emails from a compromised agency server that actors are affiliated with. You can find a lot of people's information on the dark web as well. With social media, it's getting easier and easier

[@Anirbansinha24]

@@jeoi teri ma ki rockout

[@alexmarchant4277]

nice did not know bettercap was in kali now. show people how to make there own OpenVPN :) Keep it up

[@yhytuncer]

Great video Nour ! I like the way you explain and demonstrate these attacks

[@asubzero_]

I researched Wi Fi networks and watched several tutorials, only now I understand the video in its entirety

[@frankbazuaye4747]

Awesome .So simple and very resourceful .So glad I found your channel pal

[@walidejdoevpz6600]

pls tell me how to lunche bettercap and how to download it i got stuck in the first thing hlp me pls i need to know

[@yourworstfear]

got u

[@AnantaAkash.Podder]

Excellent Tutorial Man... Very well detailed and explained...

[@mathiasdeweerdt1400]

I think you should mention HSTS and how it protects the user. Enabling DOH(DNS over https) does also provide extra security and the importance of keeping your browser and operating system up-to-date. Note: You are leaking your MAC addresses you tried to hide in the beginning of the video btw.

[@nourtechtalk]

Hi Mathias, I talked about hsts in my second video where I demonstrated the man in the middle attack but unfortunately it got removed from youtube. DoH is a great technology but its not widely supported by dns resolvers. DNS remains the achilles heel of the internet.

[@penguin--_--]

@@nourtechtalk please re-up.

[@darthwater999]

@@nourtechtalk Many people upload their banned video on odysee, a KZbin like website with few moderation

[@XiaolinDraconis]

Re-upload unpublished but leave the link in description or pinned comment.

[@CoverDrive007]

​@@nourtechtalk sir do u have any blog?

[@pagikesenja]

Thank you Nour for your excellent job, more similar videos please..

[@l3gend272]

1:51 you hid you MAC addresses at the bottom, but isn’t it showing at the top in green????

[@nourtechtalk]

Yeah I had regenerate all of them 🤣

[@theMadhatter817]

Nice,never seen anyone show proof of concept for a.vpn before

[@m4vf]

That's why when I visit Facebook, I always use an ethernet cable plugged into their mainframe, thus knowing that I'm directly connected to Facebook. The only issue is that I walk down to their HQ every time.

[@b.wallet5295]

Lol

[@that_one_who_knows4311]

wow! this is actually a sniffing! very well explained!

[@arhamsayyed9518]

Fine! You earned yourself a subscriber.

[@exe.srijan]

holy shit your 10 min video is more educational than my school

[@justcallmetruman]

Your tutorials are very clear and easy to understand, thanks my packet sniffing gangsta! What's the difference between this and ettercap if any?

[@nourtechtalk]

Its easier to use

[@vertexvstore155]

just what i was looking for (thanks man)

[@MedicalStudentChannel]

thank you, I learned from you, I am new to Cybersecurity

[@THeSRX.]

Is your journey on mid.. I am at beginning 😄

[@fargetofargeto5494]

This was beautiful. ❤

[@SA-yz5hg]

man downloading that app for the first time in linux was a pain!!

[@JoesephOIU]

Just turn on mac filtering and add your devices mac addresses. that way no one else can access your wifi even if the have the password

[@Flqmmable]

Hey great video! Bettercap is awesome. I do have one question though.. I see that you have your website based on the IP of your external wifi adapter (Wlan0) and can connect to wifi networks through it. How did you manage to do that?

[@nourtechtalk]

I have an external wifi adapter connected to my vm vis usb

[@Flqmmable]

@@nourtechtalk When I connect mine, it still says wifi networks are disabled and can only connect to network via the eth0 interface that connects to the network my host is on. Idk why that is

[@user-or2om1dj2k]

great vid, surprised by the quality by such a smalll ytber

[@0xBerto]

Hey, not sure if you caught this for your future videos. Your first probe reveals your MAC addresses that you then censored in the “show” command. 😅 anyways. Thanks !

[@Allinone-sh6cj]

What will happen if someone got your MAC address?

[@litemint09]

02:01 you did blurred out the mac address of your device after the net show command, but the mac addresses were seen after you type in mod.prob on, so its useless to blur out

[@raight4552]

you have no idea how helpful this video is, question are there budget 802x router i need something affordable

[@kayPlayz.]

Hi sir can you please launch full course of ethical hacking? I can't pay for course so i am finding it on KZbin. Your teaching is very good .

[@limaynoob6774]

Great channel and very useful recommendation, many thanks for your efforts, may i ask when setting up the mirroring device you mentioned that it has to use the same Apple ID Account (child one), but does it need the same SIM card and number ? i.e. i have to set up the two devices one after the other using same Apple ID, SIM card then do the recommended setting changes thanks to *Brian hacks online* for the phone spying

[@nottheone831]

I connected to my roommates wifi and she was able to read all my text messages, see what apps I was using. Even after I disconnected from her wifi she still was able to see everything. How was that possible? She hacked my phone remotely. I just don't know how. I never clicked on a link she sent, I always kept my phone with me. The only thing I did was use my phone to connect to her wifi. We got into an argument and she said just because i disconnected, doesnt mean she still cant see what im doing ...sigh please help anybody! How is she still able to read my text messages and what im browsing on the net????

[@HibaHiba-ct1no]

I think that is impossible but did u solve the problem

[@stellamwasa4111]

Thank you bro for the lesson coz i was looking for this lesson for days

[@randomguychannel39]

What? The part 2 video was removed, can u post it again? Btw, nice cideo and channel, just4 got a new sub

[@jcgm666]

Very good video!

[@radvinehf]

Thank you now i can rickroll everyone on my network!

[@rimrihan1281]

Very useful video. God bless you.

[@ElixirEcho]

The thing with VPN is do you trust the other side's network and their ISPs? If you VPN back to you house, then all you gotta trust is your own network and ISP.

[@anon2030]

“SSL hijacking is found, recommend replacing the network.” This is what the network security app keeps telling me, n it’s been a few years now. The yt app just shut down by itself. It’s been doing that quite often too.

[@user-vn3le5bt5x]

Last weak my hotspot was on at this am in public place then someone hack my hotspot password and connect device with me . without my permission.but I don't know who's.he connected with my device for 25 minutes .in this case can he hacked my mobile .or not .like can they get access to my gallery or my application which is in my phone like my snap chat my insta or fb .is it possible to hack my phone or not .am worried about it kindly tell me

[@novianindy887]

you cant do it with https right? 99% of websites are now Https which means this technique is not very effective.

[@dadisthatyou452]

Thanks. We'll use it for educational purposes. pinky promise

[@derrickobedgiu]

Everything was moving on pretty well on my end till you reached the dns spoofing and you automagically had your forward arrow on the redirect location yet I can't seem to set that

[@siddhubora6241]

Same problem

[@arturmg2068]

Is that the man in the middle atack?

[@robyee3325]

Well presented. great content!

[@theFabz]

Excellent 🔥

[@bkrich]

Most public WiFi these days isolate the users from each other so they’re in their own little bubble.

[@chinedumichael8776]

What if I already know the password.. (ie ) I don't need to hack the wifi password. How do I acomplish that too?

[@chyoceha3861]

Dear fbi, I really I don't have any bad intentions in watching this video, I just want to prank my friend🙏💀

[@SakibSutar-n4l]

Ok fine, we won't break break in your house.

[@itsnass4268]

I do

[@elpuertolas.6191]

is it even possible to do that without bettercap?

[@johnreynolds4065]

how come other network traffic coming from other IPs shows up when I am just trying to target one IP?

[@thegioicaycanhtrangtri]

Great one I have ever watched

[@nikitachauhan4513]

Not showing all connected

[@elementsmusicproduction692]

What if I setup a vpn on the router instead of the end device? Then all the traffic would still be exposed to the attacker right?

[@justinmartinez940]

Can you make a video on how to install kali linux?!?

[@BlackBullShort]

how do we get to the first step i cant open that thing

[@simplepyro7897]

Are you Arabic? Especially Egyptian? I'm new to the channel and I really like it! And If I'm correct don't worry I didn't hack anything about you I swear 😂😂

[@nourtechtalk]

Heheh

[@simplepyro7897]

@@nourtechtalk مصري! ازيك يسطااا 😂

[@simplepyro7897]

@@nourtechtalk لو مش حابب ترد عليا عشان اسباب خصوصيه وكدا انا اتفهمك جدا وبالتوفيق شرحك عجبني

[@justcurious5489]

great video, learned it all for the first time from you. but i can't get the device that's being spoofed hooked to beef control

[@1wilfried]

nice one! keep it up

[@JePl4y]

Great tutorial but the part about Beef XSS is wrong in my opinion, I never managed to use the beef functions apart from cookies and the user agent

[@DoonDiaries]

Not all the devices connected to my wifi is displaying in net.probe on

[@judy9231]

same , do you solve it?

[@hptc4400]

Excellent content... Thanks a lot... One question though, every time I enable arp spoof, all the other clients lose connection despite forwarding was enabled. Any advice would be appreciated.

[@nourtechtalk]

Maybe your router has anti arp spoofing? Try to connect to your mobile hotspot and see if there is a difference

[@hptc4400]

​@@nourtechtalk Thanks a lot for the feedback however, the router doesn't have anti arp spoofing and I also tried it on my hotspot to no avail. It's something I have been searching online however, I have not seen another reason.

[@hptc4400]

I am noticing a lot of tcp retransmissions when arp spoofing is enabled. Therefore, I presume traffic is not being forwarded. Isn't bettercap supposed to manage this? Any advice?

[@hptc4400]

@@SacredRoute2Hell Hi which version of bettercap are you using? Are you using the GUI or cli?

[@SacredRoute2Hell]

@@hptc4400 I'm using it on kali linux

[@jajajajajaja867]

DNS spoofing is not that easy…

[@user-xj5xp6qz5g]

wouldnt it make more sense to redirect them to the actual site they were trying to visit in the first place? That way you cold continue to monitor all the traffic and theyd not know anything was up no? what am i missin?

[@NeriaSofer]

to save u time Like this bad guy dident show us what he did in 1:11 he Change the interface Sudo bettercap -iface ("wlan0"Your Interface! to check ur interface do "ifconfig") mines is wlan0 like The guy in the Video Normal Tplink or any Adapter

[@kumarankit9243]

how to install bettercap

[@user-um9my7yc3p]

Hey when i do net.show it says etho0 not wlan0 and im only getting mdns packets

[@nicog3097]

hi i got the same problem, idk how to fix it, sometimes it works and sometimes not

[@charlesstephenadio2159]

thankyou so much i understand

[@aseel8158]

great video but please consider changing your mic. your voice is queit but very sharp. i cant increase the volume without hurting my ears

[@Jay482]

What if the end user do an ipconfig /all just to see every device that’s connected to their network, will they be able to see the attacker if they were connected to the network? And block that unknown ip address through the router network settings. This can also work to prevent attackers, or do a DNS flush to prevent any redirection to websites. Or clearing the cache files from your browser.

[@deadinside-sh]

do i need to my wifi card in monitor mode for this becuase i i need help turning on monitor mode i try turning on monitor mode which works but then network manger stops and wont let me connect to wifi networks and i have a functional wifi bluetooth in my laptop and every time i enable monitor mode i lose being able to connect to wifi the only way i can is to restart my system and it goes back into managed any help

[@briancarson9900]

Do you need help in getting access back into your account because you find it difficult doing it by yourself through tutorials in this video?? I can recommend who can help you recover your account back in a short period of time, I also tried this steps earlier to get my disabled account back but video steps failed to work& *Logan-Ethics* recovery helped me recover my account.👏👏👏

[@briancarson9900]

I thought all hope was lost but to God be the glory I was recommended to *logan_ethics* helped me recover my account successfully & 💯 you’re the best 🇺🇸

[@briancarson9900]

I’m sure *Logan_ethics* Will guide and help you through the steps to recover your lost account.

[@briancarson9900]

All you need to do is to make use of your Insta and send him a massage

[@briancarson9900]

Kindly contact Logan_Ethics he has over 6k followers He's fast reliable and trusted FR he can assist you immediately

[@slamdunker6926]

The IPs that it shows are all private ips

[@user-wm8yz]

thanks ... I was looking for this ...just to get my hands on it and how I can use the commands ...

[@changeme13]

A good video, does redirection also work for official sites?

[@dandtech]

no, as they use HTTPS - set your browser for HTTPS only.

[@giovanniguarino588]

May be hacking is generic title, may you iniject SQL in a internal network with Bettercap?

[@Beatsonlite]

bro this is great manze

[@AlexiHusky]

Doesn't https prevent arp spoofing from being this legible??? I thought urls and host names are encrypted after the hand shake?

[@easylearning1207]

I tried to do the same in my laptop, I don't know why but when I wanted to visit websites to make sure that it shows me information about my actions on laptop suddenly internet stoped working

[@lordsasta2k13]

i cant install beef.xss

[@tonilearn]

The question about using VPN is that: would the VPN owner be able to see all of my inputs to the net? in that case, would they miss use the information they are getting from me? Thanks.. hope you could create a content based upon this question I have.. Cheers

[@AdrianTregoning]

Why was your part 2 removed by KZbin? Bleak, would love to learn how to create my own VPN.

[@tonycheung7624]

Amazing Video

[@Tomato_Thunder]

WHAT THE HELL THIS IS SO COOL!!!

[@Bwcap]

Definitely will try!

[@pz1]

These attacks are 10 years old. They don’t work in any current website that matters. Bettercap is betteruseless. Go hack apis.

[@phonexorsi]

IM NEW TO THIS BUT WAT WEBSITE WAS THAT WAS IT KALI LINUX??

[@MrPony654]

you have a video on how to download bettercap?

[@mohammedaldossary773]

MAN YOU'RE A LEGEND I APPRECIATE YOUR WORK

[@mervuss]

*proceeds to hack his own family*

[@gulamtahersiddiquisiddiqui2144]

hey bro did u get with is whole proccess can u explain me we can connect ourselves in instagram if u have no problen

[@shaned7545]

Even if I'm not connected thru my wifi but instead using my ethernet cable? I can be hacked?

[@NiceEyeballs]

My tenants paid my mom for wifi and she accepted it for some reason. And I had to give them wifi. So I created another wifi with a different SSID. I dunno the technical terms for many ssid thing. Can tenants still do this if I'm on a different SSID but same router is giving both SSIDs.

[@nourtechtalk]

Hopefully not if the router has good isolation