Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

mathofaka
There are two ways two change your IP on Windows. The easy way, and the hard way. Ill discuss how to do both of them in this tutorial.

Easy Way:

The first way to change it is, if your NIC (Network Interface Card) supports cloning your MAC Address. If this is the case then you go to.

Start > Control Panel > Network Connections

Right Click on your NIC card and goto properties. Then click the button labeled Configure. It should bring up another form. Click on the advanced tab. You should see under Property "Locally Administered Address" or "Network Address". Click the radio button next to the text box, and type in your new MAC address. (note you do not use the "-" when you enter your no MAC Address.

To check and see if it worked or not go to

Start > Run > and type in "cmd"

When the terminal comes up issue the command.

ipconfig /all
-----------------------------------------------------------------------------------------------------------------------------------------------

Hard Way:

To change your MAC Address the hard way, you first go to

Start > Run > and type in "cmd"

Once the terminal comes up type in

"net config rdr"

It should bring up alot of things, but what you are worried about is

NetBT_Tcpip_{ The Numbers Between here}

Copy the numbers in between there and write it down somewhere, seeing that you will need them later.

After you are done with that go to

Start > Run > and type in "regedt32"

That should bring up the windows registry. Once the registry is up go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}

Click on the drop down menu and you should see the sub-categories

0000
0001
0002
and so on.

Click on each one and compare the "NetCfgInstanceId" Key with the number you wrote down earlier. Once you find a match double click on the key "NetworkAddress" and change the value to your new MAC address. Hit ok and reboot your system.

ph34r.gif ph34r.gif ph34r.gif
nuorder
and to save having to reboot or disable/re-enable the NIC you can run devcon in a batch file to quickly restart it.
http://support.microsoft.com/default.aspx?...b;EN-US;Q311272

so the command will be something like this (wildcards can be used)
QUOTE
devcon restart PCI\*part of my device id*


there was some code and more on this method in the old codelinx forum but i have no idea where that site has gone :S
Sh4dowWalker
or you can use a program like AMAC which can even scan the ip range for mac addresses
http://amac.paqtool.com

cheers
click
Another, perhaps better designed tool, is SMAC and SMAC-CL. Both work on all version of windows 2000, XP and 2003.

h**p://www.klcconsulting.net/smac/
Powerful and nicely layed-out GUI for MAC address changing.
user posted image

h**p://www.klcconsulting.net/smac-cl
Command line based version, only 27kb. Might be handy for remote exploitation and network walking via command line... never really needed something like this though.

Unfortunatly these are both pay programs, but i suppose that is to be expected due to the tradeoff of simplicity.
nuorder
btw a nice free commandline one is etherchange

ntsecurity.nu/toolbox/etherchange/
mathofaka
QUOTE(nuorder @ Aug 2 2005, 05:21 PM)
btw a nice free commandline one is etherchange

ntsecurity.nu/toolbox/etherchange/
*



niceeee niceee lol i like dis one easy to use too

Warlord_David
Cain & Able also scans for Mac Addresses...and Spoofs em smile.gif
mmkhan
http://www.nthelp.com/NT6/change_mac_w2k.htm
has a good pictorial tutorial of changing mac address

http://students.washington.edu/natetrue/macshift/
i generally use above utility for changing mac address.


Thanks
touk
Mac Makeup will do the job too

http://www.gorlani.com/publicprj/macmakeup...p.asp?ver=1.71d

user posted image
Fushiryo
Attempted cloning a MAC address through the network adapter's configuration files as shown in the first example with minimal results. Ipconfig displayed the spoofed serial, but I was thereafter unable to connect to my 802.11g without reseting the changes. I was tempted to alter the router settings, also to no avail, before copying the Regedit section into a .reg file (then changing the file extension and stashing it away should it come in handy during a lanjacking session).

I downloaded the Mac Makeup, but I'm not so sure I'm going to trust crucial networking and registry settings to someone who can't manage their index array counters properly. Click and unclick the "Virtual Whatevers" check and see for yourself. I'm sure that if others have used it successfully, it's probably a logic error rather than anything that would effect the system, but visual evidence of flawed programming suggests trouble beneath the surface. sad.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.