Re: [PEN-TEST] Changing MAC address on Win2k

[sekure <sekure () hadrion com br>]

Hi all! :)
Is Working only in Win2k ??
Because i try it here in my Nt 4.0 +SP6a ...but i didn't had error in arp
command...but didn't work...look:

Configura‡Æo de IP do Windows NT

 Nome do host . . . . . . . . . . : nt_hadrion.hadrion.com
 Servidores DNS . . . . . . . . . :
 Tipo de n¢ . . . . . . . . . . . : H¡brida

 Identificador de escopo NetBIOS. :
 Roteamento de IP ativado . . . . : Sim
 Proxy WINS ativado . . . . . . . : NÆo
 Resolu‡Æo NetBIOS usa DNS. . . . : NÆo

Ethernet adaptador E100B1:

 Descri‡Æo. . . . . . . . . . . . : Intel EtherExpress PRO PCI Adapter
 Endere‡o f¡sico. . . . . . . . . : 00-10-DC-0D-40-27
 DHCP ativado . . . . . . . . . . : NÆo
 Endere‡o IP. . . . . . . . . . . : 192.168.151.100
 M scara de sub-rede. . . . . . . : 255.255.255.0
 Gateway padrÆo . . . . . . . . . : 192.168.151.1
 Servidor WINS prim rio . . . . . : 120.120.120.2

Ethernet adaptador NdisWan4:

 Descri‡Æo. . . . . . . . . . . . : NdisWan Adapter
 Endere‡o f¡sico. . . . . . . . . : 00-00-00-00-00-00
 DHCP ativado . . . . . . . . . . : NÆo
 Endere‡o IP. . . . . . . . . . . : 0.0.0.0
 M scara de sub-rede. . . . . . . : 0.0.0.0
 Gateway padrÆo . . . . . . . . . :

Then i do to test: arp -s 192.168.151.100 00-10-DC-0D-40-40
changing only the ultimate 2 numbers of mac...and it didn't show-me
error...but when i verify my mac appear igual before! look (same mac):

Ethernet adaptador E100B1:

 Descri‡Æo. . . . . . . . . . . . : Intel EtherExpress PRO PCI Adapter
 Endere‡o f¡sico. . . . . . . . . : 00-10-DC-0D-40-27
 DHCP ativado . . . . . . . . . . : NÆo
 Endere‡o IP. . . . . . . . . . . : 192.168.151.100
 M scara de sub-rede. . . . . . . : 255.255.255.0
 Gateway padrÆo . . . . . . . . . : 192.168.151.1
 Servidor WINS prim rio . . . . . : 120.120.120.2

Thkz...
until more! =)

-----Mensagem original-----
De: N0sferatu <satan () TM NET MY>
Para: PEN-TEST () SECURITYFOCUS COM <PEN-TEST () SECURITYFOCUS COM>
Data: Domingo, 11 de Fevereiro de 2001 23:47
Assunto: Re: [PEN-TEST] Changing MAC address on Win2k


; I don't really know whether this is correct but I have tried and found
that the MAC address can be changed in Win2k by issuing this command :
arp -s ip-of-the-computer mac-address

though it might be wrong..

\

-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of Parth Galen
Sent: Monday, February 12, 2001 4:46 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] Changing MAC address on Win2k


I recently read in Pen-Test that the MAC could be changed in Win2k. I have
looked on the web for info, and in the archives at Security Focus but can
not find any "How To" information. Nothing on my system offers any obvious
opportunity either.

So, can anyone tell my how to change the MAC on Win2k.

This has to do with better anonymity while doing Pen-Tests. It is nice to
hop through proxies, but my MAC is always there to ID me. Specifically, I
working in a multi-site company, and their ID (they tell me) is blocking my
work based on MAC. Changing IP does not help.

Thanks Much,
Parth


Get your small business started at Lycos Small Business at
http://www.lycos.com/business/mail.html