How about
((RemoteWebDriver) (((EventFiringWebDriver) driver).getWrappedDriver())).getCapabilities()
First cast the driver returned from DriverFactory.getWebDriver() into EventFiringWebDriver. Then retrieve the wrapped WebDriver from getWrappedDriver() and finally cast that into RemoteWebDriver