Re: Changing the mac address on Windows 2000 and XP

[Mike Sweeney <mikesweeney () packetattack com>]

Not true.. some devices will let you "masquerade" the MAC address to  
what ever you want.   People spoofing wireless connections take  
advantage of this all the time :o   You sniff around an airport, find  
a connection in use, make a note of the Mac and then use it when the  
connection leaves for his/her flight. Or just bump them off. Now you  
are riding on their dime.  Some OS will let you do this easily,  
Windows is not always that nice, many times you need a third party  
utility to flip the MAC.

So I guess the real answer is no, you can not "change" the MAC  
generally (there are exceptions) speaking but you can hide it and use  
a different one which is just as effective as changing it.

Here are some notes:

http://www.tech-faq.com/change-mac-address.shtml


MikeS

____________________________________

mikesweeney () packetattack com
www.packetattack.com
Home of "Network Security using Linux"

Office 714.637.4235



On Jul 5, 2005, at 7:37 PM, Joe Osborn wrote:

> Not possible to change the MAC Address of a network device to my  
> knowledge.
> They are coded into the firmware of the device itself and assigned  
> by the
> manufacturer.  You can always put a second NIC in the machine and  
> Nat thru
> it so it appears to come from a different NIC because in fact it  
> would be.
> Does this help?
>
> Joe
>
> -----Original Message-----
> From: Pranav Lal [mailto:pranav.lal () gmail com]
> Sent: Tuesday, July 05, 2005 11:26 AM
> To: security-basics () securityfocus com
> Subject: Changing the mac address on Windows 2000 and XP
>
> Hi all,
>
> Is there any way to change the mac address of a LAN card in Windows
> 2000 and Windows XP?
>
> As a corollary to the question, how would one detect if a computer
> was changing its mac address? This is assuming that the network on
> which this machine is connected has DHCP enabled.
>
> Pranav
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005