BRTR – Reap what they route.

BRTR (pronounced "Brouteur") is a stealthy Man-in-the-Middle (MITM) traffic interception tool that leverages brouting on network bridges to silently capture, analyze, or manipulate traffic.

🚀 Features

• 🔍 Passive traffic interception via brouting on bridged networks
• 👻 Silent MITM with minimal footprint

---

📦 Prerequisites

• Linux-based system (tested on Kali)
• iptables
• ebtables-legacy
• Root access required

---

⚙️ Usage

Update the configuration on the top of the file

IFACE1="eth0"               # First network interface
IFACE2="eth1"               # Second network interface
BRIDGE="br0"                # Bridge interface
PROXY_PORT=8080             # Local transparent proxy port
PORT_TO_REDIRECT=(80 443)   # Ports to redirect to the proxy

And then run it

sudo ./brtr.sh

---

🧠 How It Works

In short:

• Create a bridge to let devices on the same LAN as usual
• Redirect traffic to some specified port to the level 3 via a brouting command
• Redirect the packet after brouting to a local proxy

---

🧯 Disclaimer

This tool is for educational and authorized security testing purposes only.
Unauthorized use on networks you do not own or have explicit permission to audit is illegal and unethical.

---

🙏 Credits

Created by Valentin Giannini / Thales Cyber Solutions Luxembourg