81 votes
Accepted

School asked us to submit our MAC addresses

I think you should ask why they want to use the MAC address, not necessarily for privacy reasons; "why do you need the MAC Address?" I think it's a reasonable question to ask them. Firstly, they will ...
Darragh's user avatar
  • 1,102
70 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

Physically finding them is not easy. If you are really willing to catch them, buy a couple ESP8266 modules (search eBay for them), research this project a little, drop a couple modules around and you ...
ThoriumBR's user avatar
  • 53.5k
63 votes

Bypass MAC address internet time filtering?

You can defeat your brother's access restrictions, either by a timing-attack or side-channel attack. In a timing-attack, you wait for a sufficient time, your brother will remove the MAC filtering for ...
Dog eat cat world's user avatar
52 votes
Accepted

Identification of a laptop using a spoofed WiFi MAC address

Detecting and blocking spoofed MAC addresses is a losing game. As Toni pointed out, the attackers could just start copying MAC addresses of real devices so you would have no practical way to stop them....
nobody's user avatar
  • 11.5k
42 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

So the question is how to find their physical address location based on the mac address? You can't, IP addresses and MAC addresses do not carry any location information. Your access point may be ...
Teun Vink's user avatar
  • 6,898
33 votes

School asked us to submit our MAC addresses

For a school, having all student device MAC addresses (unique hardware identifier) is a way to filter out a lot of unwanted traffic from the LAN. Even if outside devices from non-students spoof a ...
Yokai's user avatar
  • 795
26 votes

School asked us to submit our MAC addresses

Well, the school already has your MAC address since you've connected to their access points in the past. What they don't (necessarily) know is the association between your MAC addresses and your real ...
Navin's user avatar
  • 465
20 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

Change your WiFi Password - make sure it's strong. Make sure you are using WPA/WPA2 Check your "plugged in" devices. They show up in the MAC list as well, and just because something says "Android" ...
SnakeDoc's user avatar
  • 357
19 votes

Bypass MAC address internet time filtering?

You could change your MAC address to something different. If he simply blacklisted your MAC addresses, it should be sufficient enough to generate a random address. If he whitelisted his own addresses, ...
multithr3at3d's user avatar
18 votes

Identification of a laptop using a spoofed WiFi MAC address

Just use authentication like a great deal of local coffee shops here do. Their usual strategy is to change the password every day and post it on a note near the cash desk. Or print it on the receipts. ...
fraxinus's user avatar
  • 3,488
17 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

MAC addresses are tied to equipment manufacturers. So MAC address can tell you the vendor that produced the device that is accessing your network, and not a bit more. You can use that page for a ...
xmp125a's user avatar
  • 397
10 votes
Accepted

Cannot identify or block unknown MAC addresses

Four possibilities come into mind for your slow internet. Your neighbors are using your wifi (e.g., you are using weak security on your router like WEP or are using very weak guessable passwords - ...
dr jimbob's user avatar
  • 39.3k
10 votes

Identification of a laptop using a spoofed WiFi MAC address

This is a theoretical technique and may not be practical without putting in sufficient effort to develop and test your own detection tool. I'm leaving this here because it is a possible technique and ...
forest's user avatar
  • 66.4k
8 votes
Accepted

Cannot identify or block unknown MAC addresses (Part 2)

Those 5 MAC addresses all are in the 00:FF domain, which are traditionally used for bridged/routed adapters. They aren't assigned to any individual vendor by the IEEE. In this case, you have two ...
Herringbone Cat's user avatar
8 votes
Accepted

How to find remote routers mac address?

One important followup question is: Which MAC address? The router will most likely have at least one MAC address for the WAN side and one for the LAN side. Should the vendor have chosen to create ...
kasperd's user avatar
  • 5,482
8 votes
Accepted

What does two IP-addresses using the same MAC-address mean?

I would read your logs as follows: 192.168.1.64 is the IPv4 address the physical interface with MAC 00:1f:f3:5a:77:9b is using. I would tend to assume the IP was handed out via DHCP, but you would ...
iwaseatenbyagrue's user avatar
7 votes
Accepted

MAC overflow (flooding)

Yes, this it still is a threat and this is why: MAC flooding is based on the overflow of the CAM Table (Content Access Memory). The CAM table assigns physical ports to MAC addresses. The CAM table ...
davidb's user avatar
  • 4,313
7 votes
Accepted

MAC randomization for Bluetooth?

For bluetooth low energy (BLE), this site mostly explains the problem: https://blog.bluetooth.com/bluetooth-technology-protecting-your-privacy To safeguard user privacy, manufacturers can make use ...
maze's user avatar
  • 301
5 votes
Accepted

Deauth all users on AP except yourself

A rather quick Google search for "python wifi deauth" reveals several results for your question. WiFi Jammer seems to do the job: Continuously jam all wifi clients and access points within range. ...
Jeroen's user avatar
  • 5,841
5 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

If you want to find the source you need to triangulate the wifi signal with an access point, either the router itself or perhaps something small like a raspberry pi or laptop configured to look like ...
Shaun Wilson's user avatar
5 votes

Bypass MAC address internet time filtering?

Reset the router. MAC blocking is not an effective means of censoring internet access if you already have physical access to the router, which is likely since you live in the same home. There is ...
March Ho's user avatar
  • 1,705
5 votes
Accepted

Are there security reasons for prohibiting universal mac address modification?

It is difficult to answer this question, because we don't have any insights on the way of thought of those at MicroSoft. However, as you said, there are two types of MAC's: a universally-administered ...
Ljm Dullaart's user avatar
  • 2,055
4 votes
Accepted

How can Port Stealing be used as a MiTM attack?

The behavior you describe is true. However, the trick is that the attacker software will not keep the stolen port for itself, it will proceed in the following loop: Steal the port, Receive some data, ...
WhiteWinterWolf's user avatar
4 votes

Is it dangerous to post my MAC address publicly?

Some Belkin routers set a default WPA password that could easily be derived from the router’s MAC address, and if you have one of those routers, then publishing your MAC address is an obvious security ...
Mike Scott's user avatar
  • 10.2k
4 votes

With Nmap it is possible to scan according mac address?

This is a one-liner to find the IP of a Synology NAS by MAC address in the local network: nmap -sP 192.168.1.0/24 | grep -B 2 "00:11:32:XX:XX:XX" | head -n 1 | cut -d " " -f 5 ...
Oscar's user avatar
  • 41
4 votes
Accepted

With Nmap it is possible to scan according mac address?

Keep in mind that nmap is an IP based scanner. Based on the information that you have provided, I would suggest using nmap to perform a host discovery i.e. identifying active hosts in a network. This ...
Shurmajee's user avatar
  • 7,417
4 votes
Accepted

Can WiFi detect you even if you aren't connected

I've read that the way wifi works is that your computer sends out requests looking for any wifi it recognizes. That depends on the configuration of both the access point (AP) and your device. Most ...
Arminius's user avatar
  • 44.6k
4 votes

Cannot identify or block unknown MAC addresses

Before you spend more time trying to fix the anomalous MAC address issue I'd suggest verifying it's the problem. Can you use wireshark to actually check that traffic is passing to/from the devices? (...
user1781837's user avatar
4 votes
Accepted

Is there any way to scan a host with nmap without arp respond?

Nmap by default performs ARP scan at the discovery stage but if you want to disable it explicitly then you have to specify --disable-arp-ping. As you said that You have specified -Pn then it's for ...
Abhishek Singh's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible