mycapsules/_posts/older/2009-01-14-changing-mac-address.md

---
layout: post
title: Changing MAC address
created: 1231899123
categories:
- network
- tweak
- tips
---
<!--break-->
<p><em>What is MAC address?</em></p>

 <p>- MAC stands for Media Access Control; it might not make any sense to anyone, but it actually is sort of serial number for every NIC. That makes more sense this way, doesn't it? MAC is 48 bits long; first 24-bit is to identify manufacturer. For instance, 00:A0:C9:1E:3E:CD is NIC from intel because 00:A0:C9 is OID--Object Identifier--indicated as &quot;intel corporation.&quot;</p>

<p><em>Why do we have to change MAC address?</em></p>
<p>- There are numbers of reasons why we have to change MAC, but most of the time, we have to change to hide something or pretend to be different called MAC spoofing. For example, we have been blocked by school's network because we don't remember user and/or password or we suck too much bandwidth--torrent?. Then they blocked us! The easiest way to get away is to change MAC--it's like changing a badge :-P so, the system will recognize us as someone else. Or we are sniffing something and we don't want anyone to recognize us.</p> 

<p><em>How to change it then?</em></p> 
<p>- Basically MAC is stored in ROM of each NIC, the only way to change that is to re-write on ROM with different number. However, the procedure to ask for MAC address is depending on OS, so why do we have to change physical stuff while software is much easier to change, right? Thus, it's all up to each OS.</p> 

<p><em>For Linux,</em> </p>  <p>Well, Linux is powerful of tweaking thing as usual. Therefore, it doesn't need anything else rather the utilities it already has.</p>  <pre class="html" name="code">ifconfig eth0 down
ifconfig eth0 hw ether 00:A0:C9:00:00:01
ifconfig eth0 up</pre>

<p>First command is to disable eth0. Then change the MAC address to 00:A0:C9:00:00:01 and bring it up. That's pretty easy, isn't it? </p>

<p>For BSD, </p>

<pre class="html" name="code">ifconfig xl0 down
ifconfig xl0 link 00:00:00:AA:AA:AA
ifconfig xl0 up</pre>

<p>It's working pretty much the same as Linux =)</p>

<p><em>For Windows,</em> </p>

<p>MAC can be changed two ways: editing Registry directly or using Windows itself or 3rd party software. For editing Registry, you have to find in </p>

<pre class="html" name="code">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\</pre>

<p>Then you will find a bunch of folders (0000, 0001, 0002, ...) You just have to go through everyone until you find NIC you want to change. After that, you will have to add &quot;String entry&quot; named &quot;NetworkAddress&quot; which has value as MAC you want such as 000475123456, no colon or anything between numbers. Then restart once or disable and enable that NIC. It will be all set.</p>

<div><a class="highslide" onclick="return hs.expand(this)" href="http://mycapsules.com/sites/default/files/2009/01/registry-mac.png"><img height="166" alt="NetworkAddress - Registry Editor" src="http://mycapsules.com/sites/default/files/2009/01/registry-mac-thumb.png" width="240" border="0" /></a> 

  <div class="highslide-caption">NetworkAddress - Registry Editor </div>

  <div class="highslide-overlay closebutton" id="closebutton" title="Close" onclick="return hs.close(this)"></div>
</div>

<p>Another way is using 3rd party software. There are tons of software available to do this such as <a href="http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp" target="_blank">Mac Makeup</a> or <a href="http://www.irongeek.com/i.php?page=security/madmacs-mac-spoofer" target="_blank">MadMACs</a>. Mac Makeup is for changing MAC pretty easy while MadMACs will random MAC address and/or hostname.</p>

<p><a href="http://forum.mycapsules.com/discussion/6/mac-spoofing/"> >>Discuss more here<< </a></p>