# offensive tools

Published articles for offensive tools.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI

DevFeed: [Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI](<https://devfeed.tech/articles/introducing-bettercap-2-4-0-can-bus-hacking-wifi-bruteforcing-and-builtin-web-ui-41269.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2024/09/13/Introducing-bettercap-2-4-0-CAN-bus-hacking-WiFi-bruteforcing-and-builtin-web-UI/>)

Author: Simone Margaritelli

Published: 2024-09-13T10:46:25Z

Content type: release

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Security](<https://devfeed.tech/topics/security.md>), [Fuzzing/Fuzz testing](<https://devfeed.tech/topics/fuzzing.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>), [ui](<https://devfeed.tech/topics/ui.md>)

Tags: [automotive-security](<https://devfeed.tech/tags/automotive-security.md>), [bettercap](<https://devfeed.tech/tags/bettercap.md>), [can-bus](<https://devfeed.tech/tags/can-bus.md>), [canbus](<https://devfeed.tech/tags/canbus.md>), [car](<https://devfeed.tech/tags/car.md>), [car-hacking](<https://devfeed.tech/tags/car-hacking.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [features](<https://devfeed.tech/tags/features.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [ics](<https://devfeed.tech/tags/ics.md>), [industrial](<https://devfeed.tech/tags/industrial.md>), [industrial-control](<https://devfeed.tech/tags/industrial-control.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [release](<https://devfeed.tech/tags/release.md>), [socketcan](<https://devfeed.tech/tags/socketcan.md>), [webui](<https://devfeed.tech/tags/webui.md>), [wifi](<https://devfeed.tech/tags/wifi.md>), [wifi-bruteforcing](<https://devfeed.tech/tags/wifi-bruteforcing.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>)

### AI overview

The article announces bettercap 2.4.0, a major release that adds functionality for car and industrial control system security research. It describes a new CAN-bus module for reading, replaying, injecting, and fuzzing frames, parsing frames with DBC files, and detecting ECUs, alongside other new features and fixes.

### Source excerpt

I'm happy to announce, after quite some time, the new bettercap 2.4.0 major release. Other than including a plethora of long due fixes (additionally to what the recent 2.33.0 already fixed), it also packs a few new functionalities that extend its reach to car and industrial control system hacking. It'll possibly take me some time to update the documentation on the official website so I'm here today to write a bit about the new features. Also remember that you can use the help, help ui, help can and help wifi commands to check all the new options and added functionalities.

## Legba: An Asynchronous Rust Framework for Authentication Bruteforcing

DevFeed: [Legba: An Asynchronous Rust Framework for Authentication Bruteforcing](<https://devfeed.tech/articles/enumerate-bruteforce-attack-all-the-things-presenting-legba-41268.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2023/11/02/Enumerate-Bruteforce-Attack-All-The-Things-Presenting-Legba/>)

Author: Simone Margaritelli

Published: 2023-11-02T16:46:32Z

Content type: opinion

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Tool](<https://devfeed.tech/topics/tool.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Tokio](<https://devfeed.tech/topics/tokio.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [amqp](<https://devfeed.tech/tags/amqp.md>), [async](<https://devfeed.tech/tags/async.md>), [asynchronous](<https://devfeed.tech/tags/asynchronous.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [bruteforce](<https://devfeed.tech/tags/bruteforce.md>), [cassandra](<https://devfeed.tech/tags/cassandra.md>), [csrf-token](<https://devfeed.tech/tags/csrf-token.md>), [dns-subdomain-enumeration](<https://devfeed.tech/tags/dns-subdomain-enumeration.md>), [http](<https://devfeed.tech/tags/http.md>), [hydra](<https://devfeed.tech/tags/hydra.md>), [imap](<https://devfeed.tech/tags/imap.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [kerberos-pre-authentication](<https://devfeed.tech/tags/kerberos-pre-authentication.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [legba](<https://devfeed.tech/tags/legba.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [mssql](<https://devfeed.tech/tags/mssql.md>), [multi-protocol](<https://devfeed.tech/tags/multi-protocol.md>), [mysql](<https://devfeed.tech/tags/mysql.md>), [ntlm](<https://devfeed.tech/tags/ntlm.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [oracle](<https://devfeed.tech/tags/oracle.md>), [password](<https://devfeed.tech/tags/password.md>), [pgsql](<https://devfeed.tech/tags/pgsql.md>), [pop3](<https://devfeed.tech/tags/pop3.md>), [project-release](<https://devfeed.tech/tags/project-release.md>), [rdp](<https://devfeed.tech/tags/rdp.md>), [red-team](<https://devfeed.tech/tags/red-team.md>), [rust](<https://devfeed.tech/tags/rust.md>), [tokio](<https://devfeed.tech/tags/tokio.md>), [tool](<https://devfeed.tech/tags/tool.md>), [wordlist](<https://devfeed.tech/tags/wordlist.md>)

### AI overview

The article presents Legba, a Rust-based authentication bruteforcing tool developed as an asynchronous and modular alternative to tools such as THC Hydra. It discusses the motivation, design objectives, supported features, and a limited localhost benchmark comparing Legba with Hydra.

### Source excerpt

During the last few weeks I've been working on a new tool that started as a way for me to become more familiar with Rust and its

## Bettercap 2.0 Released as a Go-Based Framework for MITM Attacks and Network Monitoring

DevFeed: [Bettercap 2.0 Released as a Go-Based Framework for MITM Attacks and Network Monitoring](<https://devfeed.tech/articles/all-hail-bettercap-2-0-one-tool-to-rule-them-all-41257.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2018/02/27/All-hail-bettercap-2-0-one-tool-to-rule-them-all/>)

Author: Simone Margaritelli

Published: 2018-02-27T19:37:20Z

Content type: release

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [Go Language](<https://devfeed.tech/topics/go-language.md>), [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [Android](<https://devfeed.tech/topics/android.md>), [macOS](<https://devfeed.tech/topics/macos.md>)

Tags: [2](<https://devfeed.tech/tags/2.md>), [android](<https://devfeed.tech/tags/android.md>), [bettercap](<https://devfeed.tech/tags/bettercap.md>), [ble](<https://devfeed.tech/tags/ble.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [go](<https://devfeed.tech/tags/go.md>), [golang](<https://devfeed.tech/tags/golang.md>), [macos](<https://devfeed.tech/tags/macos.md>), [mitm](<https://devfeed.tech/tags/mitm.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [network](<https://devfeed.tech/tags/network.md>), [network-attacks](<https://devfeed.tech/tags/network-attacks.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [project-release](<https://devfeed.tech/tags/project-release.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [release](<https://devfeed.tech/tags/release.md>), [traffic-interception](<https://devfeed.tech/tags/traffic-interception.md>), [wifi](<https://devfeed.tech/tags/wifi.md>)

### AI overview

The article announces bettercap 2.0, a complete reimplementation of the Man-in-the-Middle attack framework. It describes a move from Ruby to compiled Go, with improved concurrency, performance, and reduced resource usage, alongside support for network monitoring, Wi-Fi and BLE attacks, and multiple platforms.

### Source excerpt

It's with immense pleasure that I announce the release of the second generation of bettercap, a complete reimplementation of the most complete and advanced Man-in-the-Middle attack framework. This release not only brings MITM attacks to the next level, but it aims to be the reference framework for network monitoring (we <3 blueteams too), 802.11, BLE attacks and more! :D ベッターキャップ！

## This Is Not a Post About BLE, Introducing BLEAH

DevFeed: [This Is Not a Post About BLE, Introducing BLEAH](<https://devfeed.tech/articles/this-is-not-a-post-about-ble-introducing-bleah-41255.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2017/09/23/This-is-not-a-post-about-BLE-introducing-BLEAH/>)

Author: Simone Margaritelli

Published: 2017-09-23T15:06:56Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Bluetooth](<https://devfeed.tech/topics/bluetooth.md>), [Security](<https://devfeed.tech/topics/security.md>), [Fuzzing/Fuzz testing](<https://devfeed.tech/topics/fuzzing.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Tool](<https://devfeed.tech/topics/tool.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [ble](<https://devfeed.tech/tags/ble.md>), [bleah](<https://devfeed.tech/tags/bleah.md>), [bluetooth](<https://devfeed.tech/tags/bluetooth.md>), [bluetooth-low-energy](<https://devfeed.tech/tags/bluetooth-low-energy.md>), [btle](<https://devfeed.tech/tags/btle.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [hack](<https://devfeed.tech/tags/hack.md>), [iot](<https://devfeed.tech/tags/iot.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [tools](<https://devfeed.tech/tags/tools.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>)

### AI overview

An introduction to hacking Bluetooth Low Energy devices that also presents BLEAH, an open-source tool. The article discusses BLE's discoverability, connection behavior, data access, and lack of built-in protocol security, while noting that automatic fuzzing features were kept in a private fork.

### Source excerpt

This is not a post about BLE, but rather on how to hack it ... well, to be honest, BLE devices are usually very easy to hack, so it's just a quick intro to it, I'll also take the chance to open source one of the last tools I've made and that I kept private so far. I moved the features I thought to be dangerous ( aka: auto fuzzing all the BLE things and bring chaos ) in a private fork which will stay private, however it's not that complicated to chain bleah with other tools ( cough ... radamsa ... cough ) and have lots of fun. Oh and this is also because someone asked me some intro on BLE, so yeah, his fault.