22 April 2014

MAC spoofing in Windows

Spoofing your wireless adapter's MAC address is quite a simple trick to pull off in Windows and if you ever need to do it, this is the easy method:


  1. Find your ID information for the adapter
  2. Edit the registry entry for your MAC
  3. Disable the adapter
  4. Enable the adapter
Here are the steps in a little more detail:

  1. Find your ID information for the adapter
    1. Open a command prompt (Start --> Run --> CMD)
    2. ipconfig /all
    3. Note the Description and Physical Address information

  2. Edit the registry entry for your MAC


    1. Start --> Run --> REGEDIT
    2. Go to...
      Computer\HKLM\SYSTEM\ControlSetXXX\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}

    3. There will be a bunch of entries, one for each adapter, so go into each field and check "AdapterModel" to see if it matches your Description from step 1.3 and then confirm the MAC address from step 1.3 matches NetworkAddress.

    4. Right-click on the adapter folder that matches your device --> New --> String Value --> "NetworkAddress" (without any "'s).
    5. Change the Value data field of the new entry and enter a new MAC address. For example, DEADBEEFCAFE.
  3. Disable the adapter
  4. Enable the adapter
Check your MAC address by running IPCONFIG /ALL ...

HINT: A neat trick I've employed is to rename the NetworkAddress entry in the registry to .NetworkAddress when I won't be using it but it's then easier to find with a search later.

No comments: