Program Display

MAC Address Spoofing

MAC address spoofing is a method that changes the unique identifier, known as the Media Access Control (MAC) address, assigned to a network interface controller (NIC) on a device. Each NIC has a MAC address assigned by the manufacturer, which uniquely identifies the device on a network. By changing the MAC address, users can hide their actual identity on the network, enabling anonymous operation or bypassing network restrictions. This can be achieved either through specific software or by manually adjusting the device's network settings.

How it Works

1. Check for Admin Rights: The script first checks if it has administrator privileges, which are necessary for modifying network settings. If not, it requests for them.
2. Selection Menu: The script then enumerates all the Network Interface Controllers (NICs) on your system and displays them in a list. You can select the NIC you want to modify by entering its corresponding number.
3. Action Menu: After a NIC is selected, the script displays a list of actions you can perform: spoof the MAC address, revert to the original MAC address, or set a custom MAC address. You can select the action you want to perform by entering its corresponding number.
4. Perform Action: Depending on your selection, the script will perform the corresponding action:
   • Spoof MAC: The script generates a random MAC address and assigns it to the selected NIC.
   • Revert to Original MAC: The script removes the custom MAC address from the selected NIC, causing it to revert to its original MAC address.
   • Set Custom MAC: The script prompts you to enter a custom MAC address, which it then assigns to the selected NIC.

After performing the action, the script returns to the Selection Menu, allowing you to perform actions on other NICs or the same NIC again.

Further Reading

• General technical knowledge
• Differences between CurrentControlSet, ControlSet001, and ControlSet002
• Issues with Windows 7 Wireless NIC & Workaround

Important Note on Windows Registry

In the Windows Registry, the key HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318} is crucial for managing and storing network adapter information. Each subkey within this class corresponds to a specific network adapter installed on the system.

• Class Identifier (CLSID): {4d36e972-e325-11ce-bfc1-08002be10318} is a Class Identifier (CLSID) associated with the "Network Adapters" class in the Windows Device Manager.
• Subkeys and Indices: Under this class key, you'll find subkeys with numerical indices, each representing a different network adapter. For example, HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000 represents the first network adapter.
• Key Values:
  • NetCfgInstanceId: Contains a unique identifier for the network adapter.
  • DriverDesc: Provides a human-readable description or name of the network adapter.
  • NetworkAddress: Stores the MAC address of the network adapter.

Visual Guides

Retrieving & displaying captions from NICs:

Showing registry subkeys (aka Indexes from a Caption) under the CLSID: