simple MAC spoofing?

g4j · Posted: Mon Aug 08, 2005 5:37 pm Post subject: simple MAC spoofing?

I have a duel-booting Dell Inspiron. I would like to spoof the MAC address on the Gentoo side so that my DHCP server will see/treat the Gentoo image as a different computer. How do I do this?

tomvollerthun · Guru Joined: 19 Mar 2005 Posts: 316

Since it is a potentially criminal act (or at least very closely related to such), if you try this on computers that don't belong to you, it think it is very unlikely that you'll get a hands-on-tutorial in here.
Even if you did, I would think the answer might need to be moderated down in order to keep the forum as far away from juristic trouble as possible.

So, if it is something legal you want to achieve, I'm pretty positive that you can do it another way. Just tell us what you want.
If it's not, search the web: there are many other places where you can find hacker's handbooks and stuff like that.

cu, tom
_________________
Computer science is no more about computers than astronomy is about telescopes.
Dijsktra
---------------
Don't believe my "Guru" status!

jbc28 · Posted: Mon Aug 08, 2005 6:09 pm Post subject:

How is this illegal?
J

g4j

What I want is for my DHPC server to assign a particular reserved IP address when I'm booted into Windows, and a different particular address when I'm booted into Gentoo. Since the configureation of my DHPC server looks only at the MAC address, it has no way of knowing when I'm booted into which OS, and thus would assign the same IP regardless of which OS is booted.

I normally used fixed IP addresses, which works fine for desktops that never leave my home. But the notebook is sometimes at home, and sometimes on the road. Thus it needs to have a dynamic IP for when it's on the road. I figured the best solution was to used reserved IP's, but as I said my DHPC server doesn't know when my notebook is Gentoo, and when it's Windowz, so it would get the same reserved IP regardles of what is booted.

g4j · Posted: Mon Aug 08, 2005 6:16 pm Post subject: I might add...

IP packets only contain MAC information while on the LAN. MAC address are dropped once the packet reaches the internet. Thus, if someone wanted to commit an internet crime, spoofing a MAC address would not be the way to do it.

ph03n1x · l33t Joined: 06 Feb 2003 Posts: 756

lmao

Spoofing macs is illegal since when

Doing this for years at my school. We have to fill out a form to register the mac adress or our computers to access the local net. Well i bought a new laptop and was too lazy to reregister... illegal? I don't think.

jbc28 · Posted: Mon Aug 08, 2005 6:19 pm Post subject:

To change your MAC address:

g4j · Posted: Mon Aug 08, 2005 6:24 pm Post subject:

Thank you.

I assume that

ph03n1x · l33t Joined: 06 Feb 2003 Posts: 756

Dont think u can add this to /etc/conf.d/net

But u can just type it in the console after the interface is up but preferably before dhcpcd is started. Maybe u need to make a lil script for that...

rwhelan · n00b Joined: 23 May 2005 Posts: 10

couldn't you just add that line to the /etc/init.d/net.ethX script? (inside the start function of course start() {)
_________________
\ , , /_ { >.< } _\ , , /

bigfunkymo · Apprentice Joined: 23 Jan 2004 Posts: 237

It's all in how you spin it.

If you say: "I want to make this PC use a different MAC address so I can gain access to this other network," then it carries a negative tone.

if you say: "I want my gentoo machine to use the MAC address of my other computer so my cable modem will let me online," then nobody will say you're doing something illegal even though you're pretty much asking for the same advice.
_________________
[No package... Grabbing a set.]

ph03n1x · l33t Joined: 06 Feb 2003 Posts: 756

You're right

But if the knowledge is available via google or man I don't hesitate too much giving it out.

Another point is you cannot really judge about a persons intention just because of the way they are asking. There might be the wannabe 1337 who is stupid enough to ask directly and will therefore get no answer. There might also be a really evil person just clever enough to ask in a way nobody would expect he/she would do any harm and he'll prolly get the info.

So it doesn't really matter in the end...

tomvollerthun · Guru Joined: 19 Mar 2005 Posts: 316

Mac-spoofing is sported by many want-to-be hackers and I never found a real need to do it. Yet.
Obviously I have been a bit shortsighted/badly informed, so pardon me.

I just had a feeling when reading the OP, that it might just be yet another script kiddie looking for trouble to do. The other posts in this thread taught me that I was wrong.

But then, I didn't really put the poster off: Beside the OT-stuff, I just asked for more information, so we (read: you ;) could help better.

If I offended anyone, I want hereby to apologize: I didn't think my comments could be so "hot".

cu, tom
_________________
Computer science is no more about computers than astronomy is about telescopes.
Dijsktra
---------------
Don't believe my "Guru" status!

g4j · Posted: Tue Aug 09, 2005 10:04 am Post subject:

Ok, I've tried

NeddySeagoon · Posted: Tue Aug 09, 2005 10:25 am Post subject:

g4j,

In linux you can suggest an IP address to the DHCP server that you would like. It will be allocated if its free, if not, you will get another one.
I don't know if Windows supports this too.

You many not need to mess with MAC spoofing at all.

MAC spoofing will not ensure you don't get the same IP as windows unless your DHCP server reserves an IP per MAC.
Most don't, they just go round and round the pool of IPs, so you get the next free IP anyway.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

ph03n1x · l33t Joined: 06 Feb 2003 Posts: 756

As i tried to point out before you should do this in the following order, supposed eth0 is down:

g4j · Posted: Tue Aug 09, 2005 12:54 pm Post subject:

Thanks ph03n1x,

If I want the code you suggested to run at boot time, where would I put it? Is there a way to insert it into one of the config files so I don't have to call a seperate script? I've tried putting the ifconfig line in the start section of /etc/init.d/net.eth0, but that hasn't worked.

NeddySeagoon, thanks for your input. My dhcp server can be (and is) configured to reserve IP addresses per MAC. I thought that was a common feature? If I wanted Gentoo to *request* an IP (as opposed to assigning a fixed IP which would fail when I am connected to a network outside of my home) how would I do that? I assume that if I configure it to request a 192.168.... IP (which would be right for home), this request would be ignored when I bootup at work where the network is 10.....?

My desired end result is to have one known IP for Gentoo, and a different known IP for Windows - both for sake of my home network - but both must be assigned by a DHHCP server as not to cause problems when I'm connected to any network other than home. However I achieve this end result is fine.

Thanks for any input.

rwhelan · n00b Joined: 23 May 2005 Posts: 10

g4j · Posted: Mon Aug 15, 2005 11:41 pm Post subject:

Thanks rwhelan, but I couldn't get it to work. My net.eth0 file doesn't have the ebegin "Bringing ${IFACE} up via DHCP" line that you mentioned, so just stuck ifconfig in the start section.

I saw in a forum somewhere that it's not possible to spoof the mac on some of the newer hardware, but I don't know if that's true.

I'm starting to think that maybe quickswitch might be a better answer than trying to spoof the MAC. With quichswitch I could default to a static IP for my home network, then use QS to change to a dynamic setup for when I'm someplace other than home.

Thanks for your suggestion.

wjholden · l33t Joined: 01 Mar 2004 Posts: 826 Location: Augusta, GA

Umm, I just want to mention that there are a ton of great reasons to spoof a MAC address. Somebody asking about how to spoof a MAC might be trying to register an Xbox to an authenticate DHCP server or something. At the university I work we use Cisco's Perfigo software and, until a programmer here built a manual registration form about the only way to register a device without a webbrowser was to spoof the MAC.

MAC spoofing is only a problem on really poorly set up networks.

slycordinator · Advocate Joined: 31 Jan 2004 Posts: 3065 Location: Korea

Another great reason to spoof your IP is:
Lots of ISPs assign your IP based on your device's specific MAC address. So if you were to put your computer(s) behind a router you may find that you no longer have connection. Or if you had a router you were replacing you might have to spoof the old router's MAC.