Lab 32. Spoofing your MAC
Address with Macchanger
Lab Objective:
Learn how to use macchanger to spoof your MAC address.
Lab Purpose:
Macchanger is a tool which allows us to change our network card’s hardware
MAC address to a random address. This is useful when performing
penetration tests or other audits in order to evade detection.
Lab Tool:
Kali Linux
Lab Topology:
You can use Kali Linux in a VM for this lab.
Lab Walkthrough:
Task 1:
I will be using Kali Linux for this lab as macchanger comes pre-installed on
Kali. We will begin by viewing the help screen for this tool by typing the
following:
macchanger -h
We will first check what our current MAC address is using the following
command:
macchanger -s eth0
Task 2:
We must first turn off the interface we are going to change the MAC address
for, otherwise the tool will not work. To do this, use the following command:
ifconfig eth0 down
We can now set a random MAC address for this interface by executing the
following:
macchanger -r eth0
We can now bring our interface back up using this command:
ifconfig eth0 up
Finally, we can view our MAC address for this interface again to confirm that
it has been changed, using this command:
macchanger -s eth 0
Task 3:
We can also change our MAC address to a specific address if we want to
mascarade as a specific device. There are actually 4 sets of Locally
Administered Address Ranges that can be used on your network without fear
of conflict, assuming no one else has assigned these on your network:
x2-xx-xx-xx-xx-xx
x6-xx-xx-xx-xx-xx
xA-xx-xx-xx-xx-xx
xE-xx-xx-xx-xx-xx
We can do this using the following comands:
ifconfig eth0 down
macchanger -m d4:b1:10:d8:57:73 eth0
ifconfig eth0 up
macchanger -s eth0
Task 5:
We can use the “-l” option to find the MAC address prefix of specific
hardware vendors, allowing us to mascarade as a device from one of these
vendors:
macchanger -l
Task 6:
To revert to our origional permanent MAC address, we can use the following
set of commands:
ifconfig eth0 down
macchanger -p eth0
ifconfig eth0 up
| 
