14/06/2012

How to Change or Spoof MAC Addres

1.1k

Living Digitally and Electronically

Social Stuff:

HOW TO GUIDE

SOFTWARE

MOBILE APP

INTERNET

HARDWARE

GAMING

DEVELOP

COMMUNITY

HOW TO GUIDE

SEARCH
My Digital Life Editorial Team 40 Comments Delicious

Jun 30, 2008

Stu

SUBSCRIBE Get latest updates in email for free: Go

How to Change or Spoof MAC Address in Windows XP, Vista, Server 2003/2008, Mac OS X, Unix and Linux
MAC address (Media Access Control address) is a quasi-unique identifier consists of a six byte number that attached to most network adapter card or network interface card (NIC). As such, all network cards, whether its of Ethernet NIC, Gigabit Ethernet NIC or wireless 802.11a/b/g/n WiFi or HiperLAN adapter, should have different MAC addresses, which also known as Ethernet Hardware Address (EHA) or adapter address. In operating system, MAC address is often represented in 12-digit hexadecimal number. For example, 1A-2B-3C-4D-5E-6F. In practical usage, layer 2 MAC address is converted from layer 3 protocol addresses such as Internet Protocol (IP address) by ARP (Address Resolution Protocol), which then allowed each host to be uniquely identified and frames to be marked for specific hosts on broadcast networks, such as Ethernet. After translated (or when a host on LAN sends its MAC address to another machine which does n ot configured not to accept unrequested ARP replies on the network for preemptive caching), MAC address is cached on source PC ARP table for later use. Content of ARP table on each computer can be viewed by typing arp -a in Windows or arp in Linux. MAC address thus forms the basis of most of the layer 2 networking upon which higher OSI Layer protocols are built to produce complex, functioning networks. There are many reasons or possibilities that an user may want to change the MAC address or a network adapter, which also known as MAC spoofing. For example, to bypass the MAC address filtering on firewall or router. The trick can be used to get pass the network access restriction by emulating a new unrestricted MAC address, or to gain access connection by spoof an authorized MAC address after sniffing the legitimate MAC address out of the air in MAC filtering Wi-Fi network. Beside, hackers or enthusiasts also spoofing another hosts MAC address as their own in order to receive traffic packets not meant for them, although ARP poisoning technique is more commonly used. However, changing MAC address can still keep the real information from been detected and logged by various services such as IDS, firewall, DHCP server, wireless access points and etc, and is essential protect users privacy. MAC spoofing also potentially trigger a Denial of Service (DoS) attack by causing routing problem with duplicating MAC address exists in the network, especially those similar with gateway and AP routers BSSID (Basic Service Set Identifier.) Whatever the reason, its pretty easy to change the MAC address or perform MAC spoofing on most of todays hardware, listed below. Actually, the original MAC address is burnt and imprinted to the network card, and cannot be changed. However, operating system can spoof as if there is different MAC address for the network interface card using tricks below. Change the MAC address in Windows 1. Go to Start -> Control Panel. Double click on Network Connections (inside Network and Internet Connections category in Windows XP). The, right click on the active network connection with network adapter that you want to change the MAC address (normally Local Area Network or Wireless Network Connection) and click on Properties. Above steps work in Windows XP, Windows 2000 and Windows Server 2003. For Windows Vista, access to NICs properties is from Control Panel -> Network and Internet -> Network and Sharing Center -> Manage Network Connections. Alternatively, if you already know which network adapter thats responsible for your network or Internet connection, go to Device Manager and open the properties dialog by double click on the NIC itself.

My Digital Life on Facebook

Like 8,072 people like My Digital Life.

S anjan

N arendra

A y esha

S tephen

F acebook social plugin

1,190 follow ers

TRANSLATE THIS PAGE Pilih Bahasa

mydigitallife.info/how-to-change-or-s

1/10

14/06/2012

How to Change or Spoof MAC Addres

2. In the General tab, click on the Configure button. 3. Click on Advanced tab. 4. In the Property section, select and highlight Network Address or Locally Administered Address. 5. To the right, Not Present radio button is by default selected as value. Change the value by clicking on radio button for Value:, and then type in a new MAC address to assign to the NIC.

The MAC address consists of 6 pairs of numbers (0 9) and characters (A F) combination. For example, 88-17-E8-90-E2-0A. When entering the new MAC value, omit the dash (-), for example 8817E890E20A. 6. Click OK when done. 7. To verify the change of MAC address, go to command prompt, then type in one of the following commands: ipconfig /all net config rdr 8. Reboot the computer if successful to make the change effective. Note: To restore or reset back to original default MAC address, simply set back the option to Not Present. Change the MAC Address of NIC in Windows via Registry 1. Open a command prompt. 2. Type the following command and hit Enter. ipconfig /all 3. Record down the Description and the Physical Address (is MAC address) of the active network connection (discard those with Media Disconnected state).

For example, in figure above, Description is Intel(R) Wireless WiFi Link 4965AGN and MAC address is in the format of 00-XX-XX-XX-XX-XX. 4. In the command prompt also, type the following command and hit Enter. net config rdr 5. Record down the GUID for the MAC address for the active connections NIC which MAC address to be changed. The GUID is contained within the { and } brackets right in front of the MAC address as shown in figure below.

6. Type regedt32 or regedit in Start -> Run box or in Start Search for Windows Vista. Note: for Windows NT 4.0 and Windows 2000, regedt32 must be used. 7. Navigate to the following registry key:

mydigitallife.info/how-to-change-or-s

2/10

14/06/2012

How to Change or Spoof MAC Addres

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC108002BE10318} 8. Expand the {4D36E972-E325-11CE-BFC1-08002BE10318} tree, and there will be more sub-keys in the form of 0000, 0001, 0002 and so on. 9. Go through each sub-key starting from 0000, look for subkey that has DriverDesc value data that matches NIC description copied from step above, that want its MAC address to be changed. In most cases, it will be similar to the network adapter card name. To verify that the subkey found is indeed a correct one, check the value of the NetCfgInstanceId, which should have the same value with the NICs GUID taken from step above. 10. Once a sub-key is matched to the network interface card that MAC address want to be spoofed, select and highlight the subkey. Right click on the sub-key (for example, 0000), then select New -> String Value. Name the new value name as NetworkAddress. Note: If NetworkAddress REG_SZ registry key is already existed in the right pane, skip this step. 11. The double click on NetworkAddress and enter a new MAC address as its value data.

Note that the 12-digit MAC address in hexadecimal format, and should be entered without any dash (-). For example, 1A2B3C4D5E6F. 12. Reboot the system to make the new MAC address effective. Alternatively, if you dont want to restart the system, try to disable and then re-enable the network adapter in Device Manager. 13. To verify the change of MAC address, go to command prompt, then type in one of the following commands: ipconfig /all net config rdr Note: To restore or reset back to true original hardware burned-in MAC address, remove the NetworkAddress registry key that is been added. Alternative: Third party tools and utilities to change the MAC address in Windows operating system are plenty, for example: SMAC (direct download link to smac20_setup.ex, supports Windows Vista, XP, 2003, 2000), Macshift (direct download link to macshift.zip, for Windows XP), BMAC (almost identical SMAC MAC changer clone by moorer-software.com), Mac MakeUp (direct download link to macmakeup.zip, for Windows 2000/XP/2003/Vista), MadMACs (MAC Address Spoofing And Host Name Randomizing App For Windows, directly download MadMACs.zip), EtherChange (direct download link to etherchange.exe), and Technitium MAC Address Changer (for Windows 2000 / XP / Server 2003 / Vista / Server 2008). How to Change MAC Address (MAC Spoofing) in Linux and *nix To change your MAC address in Linux and most Unix-like (*nix) system, run the following script commands: ifconfig <interface> down ifconfig <interface> hw <class> <MAC address> ifconfig <interface> up For example, the command looks lik ifconfig eth0 down hw ether 1A:2B:3C:4D:5E:6F. First command brings down the network interface, second command change its MAC address while third command bring up the interface again. Note that in some cases, to bring down and bring up the network interface, the following commands have to be used: /etc/init.d/networking stop or /etc/init.d/network stop (in the case of Fedora Core 5) /etc/init.d/networking start or /etc/init.d/network stop (in the case of Fedora Core 5) Alternatively, for Fedora Code 5 Linux with Iproute2 tools installed, the following commands also can change the MAC address to spoofed version: /etc/init.d/network stop ip link set <interface> address 1A:2B:3C:4D:5E:6F

mydigitallife.info/how-to-change-or-s

3/10

14/06/2012
/etc/init.d/network start

How to Change or Spoof MAC Addres

For example, ip link set eth0 address 1A:2B:3C:4D:5E:6F. To check whether the MAC address has been spoofed, use ip link ls eth0 or ip addr ls eth0 instead of using ifconfig eth0. How to Make the Spoofed MAC Address Permanently Even After Reboot in Linux Edit the ifcfg-eth0 file (or other similar file if youre changing different interface), add the following variable line to the file: MACADDR=12:34:56:78:90:ab Then run service network restart to make the change effective immediately. How to Make the Spoofed MAC Address Permanently on Restart in Debian Edit the /etc/network/interfaces file and add in the following variable line to the appropriate section so that the MAC address is set when the network device is started. hwaddress <interface> 02:01:02:03:04:08 For example, hwaddress ether 02:01:02:03:04:08. Alternative: GNU Mac Changer (for Debian, Slackware, ArchLinux, Mandrake, Crux and other RPMbased distributions such as Fedora, Red Hat, CentOS, ASPLinux, SUSE Linux, OpenSUSE and etc. How to Change MAC Address (MAC Spoofing) in BSD or FreeBSD Issue the following commands in shell: ifconfig <interface> down ifconfig <interface> <class> <MAC address> ifconfig <interface> up First command brings down the network interface (optional), second command change its MAC address while third command bring up the interface again (optional). For example, the command looks lik ifconfig xl0 link 1A:2B:3C:4D:5E:6F or ifconfig fxp0 ether 1A:2B:3C:4D:5E:6F How to Change MAC address in Solaris The shell command to change the MAC address in Sun Solaris is as below: ifconfig <interface> <class> <address> For example, the command looks like ifconfig hme0 ether 1A:2B:3C:4D:5E:6F. Note that the change is temporary that does not persist after a reboot. To make this change permanent, the command can be placed in a runtime control script (/sbin/sh). How to Spoof MAC Address in HP-UX Its possible to change MAC address using HP-UX SAM. Select Networking and Communications, then selecting the interface, then click on Action -> Modify -> Advanced Options. Finally, change the value of station address, which is MAC address name in HP-UX. How to Spoof and Change MAC Address in OpenBSD Use the following command to change MAC Address to spoofed MAC in OpenBSD (after version 3.8): ifconfig <interface> lladdr <MAC address> For example, ifconfig bge3 lladdr 1A:2B:3C:4D:5E:6F. How to Change to Spoofed MAC Address Permanently in OpenBSD To make the MAC address changed at boot before network connection is established, and even before parsing of hostname.* file, edit the /etc/netstart file to add in the following lines before the line of # Now parse the hostname.* file: if [ "$if" = "INTERFACE" ]; then ifconfig <interface> lladdr <MAC address in format of 00:00:00:00:00:00> fi # Now parse the hostname.* file .... How to Change MAC Address in Mac OS X Since Mac OS X 10.4.x (Darwin 8.x) onwards, the MAC address of wired Ethernet interface can be

mydigitallife.info/how-to-change-or-s

4/10

14/06/2012

How to Change or Spoof MAC Addres

altered in Apple Mac OS X in a fashion similar to the Linux and FreeBSD methods. To do so, type the following command in Terminal.app: sudo ifconfig en0 ether aa:bb:cc:dd:ee:ff or sudo ifconfig en0 lladdr aa:bb:cc:dd:ee:ff (for Mac OS X 10.5 Leopard) where en0 is the network interface (numbered from en0, en1, en2 ) and aa:bb:cc:dd:ee:ff is the desired MAC address in hex notation. Alternative: MacDaddy (download MacDaddyX.dmg, support Airport wireless adapter) Related posts: 1. Change Group Ownership of Symbolic Links in Unix or Linux 2. View and Retrieve or Change Windows (XP, Vista, 2003, 2000 and more) and Office (XP, 2003, 92) Product Key or CD Key 3. KMS Crack Method to Activate Windows Vista Business or Enterprise Edition with Local Spoof KMS Server 4. Vista Remote Desktop Connection Client Slow Delay or Disconnect When Connect to Windows Server 2003 SP2 x64 Edition RDP 5. Install Windows Server 2003 Administration Tools Pack (adminpak) on Windows Vista

40 Comments
Nazmul Haque November 26, 2011 at 3:00 pm
In step 5, I cant find anything like your image. I use Win 7 64. How to pass it? Thanks
REPLY

santosh November 15, 2011 at 3:25 am

REPLY

m using vista and wireless adapter is Atheros AR5006EG Wireless Network Adapter .but my command prompt shows the older mac address not the changed one.

Johnny July 13, 2011 at 11:13 am

REPLY

when i change my mac on my xp home sp3 dell, it changes the mac but i lose connection why? can anyone help??

Vladimir Georgievsky May 20, 2011 at 12:55 am

Thanks for the article!

REPLY

stranger April 1, 2011 at 5:40 am

Lot of sites browsed, but this one helped me a lot !! Thai Works fine for CentOS 5 Heartily Thank You Regards, stranger.

REPLY

Amit March 22, 2011 at 11:07 pm

REPLY

How to check whether user has change the MAC Address ? So that we can block them by misusing this facility of MAC changing. Is there any tool for identifying the same?

mydigitallife.info/how-to-change-or-s

5/10

14/06/2012
Please tell me.. Amit Bartakke

How to Change or Spoof MAC Addres

Arthur February 20, 2011 at 4:39 am

REPLY

My ISP had found a way to ban a specific computer on a shared internet connection(cyber cafe, or having 2 or more computers at home that using the same internet connection or wifi) because of high traffic usage. Even I disconnect and reconnect to internet and change the INTERNAL IP Address still no go but the other computer is good. Now, after I change my MAC address, there's nothing can stop/throttle/or even ban my computer from using high traffic usage. It's really helps me a lot. Thanks.

blackman November 24, 2010 at 1:15 am

hi there! this is all about "NIC" how about the "DSL MODEM MAC" can you change it ?

REPLY

Anon November 14, 2010 at 9:46 pm

Thank you! It worked! I used the first method (in Windows).

REPLY

Nope October 28, 2010 at 1:21 pm

This is not working for 4965AGN you mentioned in your article. Is there any solution for this to work in windows 7 ?

REPLY

PM October 28, 2010 at 9:03 am

This is precisely the detail that I was looking for. I appreciate you time in writing this information.

REPLY

stevan September 30, 2010 at 5:18 pm

working tutorialthanks

REPLY

John April 29, 2010 at 8:17 am

I will try to do this. Thanks for sharing.

REPLY

krzych-o April 14, 2010 at 1:33 pm

Hi,

REPLY

This method working on Vista (and other systems too), but You must install older drivers (version before 12.x). This is, because blocked spoof of mac address in new drivers. Try example driver.

felipe1982 March 13, 2010 at 7:05 pm

>Just run as administrator and walla. It's voil.

REPLY

felipe1982 March 13, 2010 at 7:03 pm

REPLY

openSUSE 11.3. To make change to MAC address permanently, edit the file /etc/sysconfig/ifcfg-* and edit the variable LLADDR=00:00:00:00:00:00 to be the MAC address that you want. If you do not see LLADDR create it at bottom of file. Save/Reboot. Look to /etc/sysconfig/network/ifcfg.template for examples & ideas.

nithin February 6, 2010 at 1:26 am

REPLY

Hello, I tried to use your method but it did not work in vista. I don't know what is the problem but even though I change the mac, when I am seeing in command prompt its not over writing

mydigitallife.info/how-to-change-or-s

6/10

14/06/2012
the old mac address. Don't know why?

How to Change or Spoof MAC Addres

I have been working on this since a week and still no luck!!!!!!:-(

eduardo sousa February 2, 2010 at 3:51 am

I forgot my pass word for the wireless some way to pick the word pass thank you very much

REPLY

misto December 9, 2009 at 3:00 pm

Verry nice, Worked awesome for windows vista. Just run as administrator and walla.

REPLY

wim September 28, 2009 at 6:13 am

Is there no need to change the hostname too besides the MAC address ?

REPLY

wim September 28, 2009 at 6:08 am

REPLY

If you change the MAC address in the registry, does windows keep a log of all changes made ?

John Nguyen September 20, 2009 at 10:45 pm

REPLY

let me show u how to find the the sub-key in {4D36E972-E325-11CE-BFC1-08002BE10318} exactly. 1. Go to "device manger" 2. Double click in NIC which u want to change 3. Enter Details tab 4. Choose "Driver key" in "Properties", hen u will see the sub-key. in my case, it is {4d36e972e325-11ce-bfc1-08002be10318}011 PS: i'm using windows 7 and my wifi NIC doesn't allow to change MAC in "Device Manager". The only way i can do is change MAC in registry

LUNATiC August 31, 2009 at 12:19 am

OMG OMG OMG i LOVE YOU

REPLY

ive been trying to change my 4965AGN mac address for a long time from the device manager "network address" option but i don't have it. now i changed it from the registry thank you so very much ^_^

Joining the modern century or the ranks of the Zombies? - Page 2 July 19, REPLY
2009 at 3:36 am

[...] your connection with WPA2. A couple of samples from Google Your SSID Isnt Hidden Forever How to Change or Spoof MAC Address in Windows XP, Vista, Server 2003/2008, Mac OS X, Unix and Linux __________________ Mr Shine Him [...]

addorrer July 16, 2009 at 4:19 pm

REPLY

wrangler i think you need to access the wireless router (if you can) and check from there other than that i'm not too sure if theres a way to check

addorrer July 16, 2009 at 4:16 pm

moomoo i'm having the same problem but i'm using the intel wifi link 5100 agn

REPLY

however the link below worked to some extent but i'm still unable to get it to spoof to the mac address i want >_< http://adlm.artician.com/blog/2009/07/changing-yo any ideas? thanx in advanced

mydigitallife.info/how-to-change-or-s

7/10

14/06/2012
Wrangler June 17, 2009 at 6:43 am
Hi, Thanks man. That was brilliant.

How to Change or Spoof MAC Addres

REPLY

COuld you tell me how to check which all ipaddress are present in current network (in wi-fi). Thanks,

Reka May 21, 2009 at 8:49 am

REPLY

oooh, one more thing. I tried to use Mac Address Changer from Technitium, but it says it can't ( install itself because vista Sp2 is not compatible or supported.

Reka May 21, 2009 at 8:45 am

REPLY

I have Vista Sp2, and i can't change the network address because I've got a dell laptop, and it doesn't have anything like network address OR locally administrated address in the property section. I'm staying in a youth hostel and the only way to get to the internet is to type in that 12 character code. i used to have XP on another laptop and it worked fine, but now i can't set that address and of course the manager says it's my problem that i got this laptop. any ideas how I should work this out?

How Likely Are You For Wi-Fi Theft? | PCMech May 15, 2009 at 6:10 pm

REPLY

[...] note: MAC addresses can be spoofed. But someone would have to specifically know one of the allowed MAC addresses in your wi-fi network [...]

Mike in Real Life Keeping America Safe From Nothing February 22, 2009 at REPLY
10:19 am

[...] then? The ip address is, like it says in the bill, only temporary. MAC address? Spoof it. Sure, the real MAC address is permanently imprinted on the network card, but using your OS to [...]

Christopher Wu January 11, 2009 at 7:11 pm

THANK YOU VERY MUCH for this tip, it got my Wii working at the hotel with their authentication system. > )

REPLY

[Announcement 12/16/08] Public Ban List and more - Page 4 AionSource.com December 27, 2008 at 1:32 am

REPLY

[...] are talking about is a MAC address Part 1 Spoofing a MAC Address to Reconnect to an ISP Part 2 How to Change or Spoof MAC Address in Windows XP, Vista, Server 2003/2008, Mac OS X, Unix and Linux Learned how to do that back when I was working for my High School. ARP spoofing is fun [...]

dora October 16, 2008 at 12:37 am

@ aelsea:

REPLY

Same situation here (XP Home SP3). You have to follow the procedure "Change the MAC Address of NIC in Windows via Registry" as described above. It is a matter of only a few minutes and it worked perfectly on my computer.

aelsea September 15, 2008 at 10:54 am

REPLY

The process in step 5 under Win XP only works for the Pro version. The "home" version does not have the "Network Address" option in the Properties window. Might want to address that for folks who use the "home" version. I'm specifically looking at the screen in Win XP Home with Service Pack 3 (SP3) installed.

Jonathan October 14, 2011 at 5:28 pm

REPLY

Its not a operating system feature. Its a feature of the driver. If the driver does not have the tab then it does not have the tab.

mmm September 8, 2008 at 11:27 pm

Thanks.

REPLY

mydigitallife.info/how-to-change-or-s

8/10

14/06/2012

How to Change or Spoof MAC Addres

Helpful in getting a Wii online at a hotel without error codes (52230, 52231) due to having to log in and accept a user agreement.

moomoo September 3, 2008 at 7:59 am

REPLY

This method does not seem to work with Intel 4965AGN wireless network adapter. It seems to have some sort of override back to the hardware mac. Any ideas?

Jonathan October 14, 2011 at 5:30 pm

REPLY

It could be demanding that it follows vendor rules. Try to change it without changing the vendor id bits. Just the rest of the address. http://www.iana.org/assignments/ethernet-numbers

Aafaq August 6, 2008 at 12:54 am

REPLY

I am using ADSL MODEM. Tell me the way to change mac address of modem. I am not using NIC CArd. So pls dont send me the way to change NIC's MAC. I ma not using NIC Card.Iam not using NIC Card. Warm Regards, Aafaq.

Leave a comment
Name (required)

Mail (will not be published) (required)

Website

Comment

Confirm you are NOT a spammer Notify me of followup comments via e-mail. You can also subscribe without commenting.

NEW ARTICLES
Orient Watch Worldtime Journeyman worth $680 Free Giveaway Contest HTC Rezound Combines 4.3 True HD Screen with Beats Audio Technology iOS 5 for iPhone, iPod touch and iPad Released for Download Find My Friends App for iOS Free Download iCloud Lives

LATEST DISCUSSIONS
kaskot on Facebook for iPad Free Download kaskot on Orient Watch Worldtime Journeyman worth $680 Free Giveaway Contest

a on How to Minimize Skype to

Windows 7 System Tray (Notification Area) Andre on Fix Unable to Pin App to Taskbar and Start Menu (Missing Context Menu and Jump Lists) Error in Windows 7

mydigitallife.info/how-to-change-or-s

9/10

14/06/2012

How to Change or Spoof MAC Addres

Andre on Fix Unable to Pin App to Taskbar and Start Menu (Missing Context Menu and Jump Lists) Error in Windows 7

2005 - 2012 My Digital Life. All Rights Reserved.

About | Contact | DMCA | Privacy Policy | Sitemap

mydigitallife.info/how-to-change-or-s

10/10