Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed address as the physical address for the network card?

share|improve this question

1 Answer 1

Partially, yes. Windows OS (eg. using ipconfig command) sees the spoofed MAC address as the permanent MAC address.

However you can NOT say all of the applications running on Windows will see the spoofed one as the permanent one. Applications might be using some ways to acquire the permanent (burned-in) MAC address of the adapter. (For instance they might be using DeviceIoControl with OID_802_3_PERMANENT_ADDRESS option.) So some applications are harder to be fooled.

share|improve this answer
    
Actually, you could fully spoof the MAC address for all applications by running the system in a VM instead of running it on metal. –  Stephane Oct 1 '13 at 8:36
1  
Yes, but application can also check if it is running on VM or not and deny if it is a VM. –  Kerim Oguzcan Yenidunya Oct 1 '13 at 10:56
1  
That is not the question that was asked and that's actually a whole different subject. –  Stephane Oct 1 '13 at 12:25
    
My only issue with fully spoofing the mac in a VM is that I need to spoof the mac for a physical and specific type of adapter. Not just a generic virtual adapter, and I don't know if that is possible. –  Ethan Oct 7 '13 at 20:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.