Change your Mac

Ok having a little issue with my utill so for now you guys will have to change the Mac Address manually. Run regedit and look for the following key which is where all your netwok adapters will be located......

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Cl ass\{4D36E972-E325-11CE-BFC1-08002bE10318}]

you will have to look for the subkey that is for your card, the first subkey will be \000. My wildPacket's driver were located at \002 and my Orinoco was at \009. Look for a string value called NetworkAddress, Win 2K will have it and on Win XP you will have to add it yourself. Just double click on NetworkAddress and set the value to what you want your new Mac to be.

I tried to uses Tron's suggestion of 002cdeadbeef and my card would not function properly. I did change it to 022cdeadbeef and it worked great. After you change the Mac just exit regedit, eject your card, reinsert, run ipconfig /all from a command prompt and you will see your new mac address.

I used ethereal and it did register my new mac address with my machine.....

Next project will be to run some testing on my AP with Mac filtering enabled and spoof my card so I can hit the network........

thx a lot, again :-)

ok i don´t have XP, NT or 2K, i just have ME.
arter reading your text i found it in my reg, too.

so here is where you can find it in ME (may be in other 9x versions, too)

HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Class/Net/
there you have to look for your card (my card is 0012).
and now you have your NetworkAddress just click on it and change it or you change it in the Config directorys. after one reboot you are able to select diffrent MAC adresses by selecting another profile in your client manager ejecting your card and reinsert.

that would be a niche function in one of the next versions of netstumler ;-)

CU AssetBurned

OKay, I have 2 NetworkAddress keys. One at 0000 and one at 0011. Which one of these is the one I'm looking for as I cannot tell the difference in the values.

Also, where in said key to I modify the MAC? in the default?

Thanks,

Jagg

Chrsit, I feel like a newbie...

the key in win 9x ist the same like in XP (NetworkAddress).

if you enter a MAC there, the card will use this MAC and if it is empty it will use the default MAC.

you have to try it... i cant tell you wich one is the right. the number does only say in wich sequence you had installed network devices.
in my case there wars some strings with the name of the producer and the card type.

There's a much simpler way to do this. Open your NIC's properties/configuration page found in Network Neighborhood/My Network Places (depending on OS), or through Device Manager. Click on the Advanced tab and you will see an option to put in an Administrative Address, in WinXP it's called "Locally Administered Address", it may be different in other OS's. No need to hack the registry!

Ok I have XP on a Dell Lattitude LS. I went to the advance tab for my 3com NIC and the option to enter a "Locally Administered Address" is there but on my Orinoco card that option is not there and I had to use the reg hack that Tiguy suggested.

Thanks for the help TiGuy

I've tried the last method (directly editing NIC props) and it works great. Run it against various sniffers, local and remote, and the new MAC is in effect.

So, an easy way to spoof a net using MAC filtering would be to sniff it with AiroPeek, clone a MAC address, then program it as your own. I wonder what kind of collisions you'd get with two identical MACs on the same subnet....

bGood,

Mother

netbones thats may be working with NT/XP but not with 9x/ME :-( there are no function like that.

yup, i also tried it on a 98 machine w/no luck. sorry for the mixup.

Well, I guess that having a HAL there must be useful sometimes :-))

Isn't there a way to permanently flash a new MAC into the card?

Mother

Yes it works, but you can´t change the manufactor-id from the MAC.

(the first two chars)

02 elsa
00 cisco

greetz AleX-ZerO

I have tried this with my Lucent Silver PC card on a Windows XP Pro laptop... no luck.

I had to add a new string as follows:
NetworkAddress REG_SZ 00022D393xxx

Am I suppose to use quotes or dashes or nothing?

TIA, Jerry

I found the answer....

I have two cards, so I had to look under ControlSet002 in the registry.. all is fixed.

JerryG

I am not trying to do this for a wireless card, but my 3Com doesn't have NetworkAddress as a registry key. Anybody else using Win2k and seeing anything like this?

Just curious.

Just a point that may be of interest.

The OUI (Organizationally Unique Identifier) is actually a 24 bit long unique number. Therefore one of cisco's would be 00-03-9F rather than simply 00.

Further details along with a db query tool can be found on the IEEE site :-

http://standards.ieee.org/regauth/oui/index.shtml

bj