Penetration Testing mailing list archives

Re: [PEN-TEST] Changing MAC address on Win2k


From: Lars Gaarden <larsg () TRUSTIX COM>
Date: Wed, 14 Feb 2001 09:53:55 +0100

Alex Tibbles wrote:

Until recently, MAC addresses were stored in EPROM's (i.e. only resettable
with UV light), or before that, PROM's - write once. Do they use EEPROMs
now?

You don't change the MAC address stored in [EE]PROM on the card.

The normal operation of most ethernet chipsets is that the driver
reads the MAC address from this ROM and then use this value when
generating ethernet frames. i.e., the card doesn't generate the
ethernet frame, the driver does.

So any driver that accepts a MAC address from a different source
(say, from Linux ifconfig) can 'change' the MAC address.

--
LarsG


Current thread: