1

Is it possible to Spoof Another Machine's MAC Address on LAN?

I know we can spoof mac address of machine that we are currently on, using macchanger or ifconfig wlan0 ether de:ad:be:ef:ca:fe. But I want to make another host on LAN to pretend that it has certain mac address? Is it possible to do via anything? ARP?

And, A little about ARP: The router will broadcast a message "Who has the this MAC Address?" and the host replies. And in ARP Spoofing, Attacker intercepts and responds instead of actual host. Can we spoof this and let router know that another host(Host B) has diff. MAC Address?

PS: I don't have access to Host B, otherwise I could get on that machine and change its MAC.

  • What is your goal with that other machine? Do you want to intercept it's traffic? – nulldev Sep 7 '17 at 9:10
  • if you just want to intercept traffic you could just do arp-spoofing – architekt Sep 7 '17 at 9:24
  • ARP spoofing only work best in network Hub. For network switch, the packet arrival will be intermittent, because the target machine ARP will also broadcast it location. Unless you are able to introduce a bridge before the target machine. – mootmoot Sep 7 '17 at 11:05
  • @nulldev, Martin: I don't want to intercept the traffic, I just want my router to know one of the machine on LAN has some specific Mac Address. Thats it. Why I am doing this, Suppose in the same LAN, I have my Android device and its NOT rooted. And the LAN's Internet is configured for whitelisted MAC Addresses only. Since I know the password for wifi so I can be in on LAN from Android but can't use the Internet. So what I will do, I will send some packets to router (from my laptop) and spoof some valid Mac address as android's Mac Address so that I'll be able to use Internet on it. – vs4vijay Sep 7 '17 at 12:42
  • short answer: no – schroeder Oct 7 '17 at 13:34
2

You cannot change the MAC address on the remote machine. The method you are looking for will keep answering the arp requests and fullfil them your supplied MAC. Ettercap is the tool used. Here is great description of how arp poisoning works. This does exactly what you are asking.

  • I have explored arpspoof and now trying this. – vs4vijay Sep 7 '17 at 12:43
  • Please check as answered if this answers your question. Still new here and that would help. – hexhatchet Sep 8 '17 at 1:39
  • Naah, It doesn't answer my question. I can only for my host: ettercap -T -M arp /192.168.137.164/ /192.168.137.200/80 not for other hosts. Checking if ettercap doc has anything. – vs4vijay Sep 8 '17 at 9:23
  • What exactly are you trying to accomplish by changing the MAC of a remote machine? I assumed you wanted to redirect traffic to your own machine. – hexhatchet Sep 8 '17 at 13:44
  • Naah, I don't want to redirect the traffic to my machine. I don't wanna sniffing at all. I just wanna poison the arp cache of network for they think one machine has some mac address. Check my last comment on question. – vs4vijay Sep 8 '17 at 13:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.