Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
4148 committed Mar 17, 2015
1 parent 742300e commit 963324c
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Expand Up @@ -4,7 +4,7 @@ mac-spoofer is a script for spoofing a network adapter's MAC address on Windows
### How it Works
mac-spoofer uses the WMI API and Win32 API to retrieve your network adapter's properties, like its device id and globally unique identifier (GUID). The adapter's MAC address is modified by setting the value `NetworkAddress` in a key in the registry path `HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}`. The registry key where `NetworkAddress` is set is found by matching your adapter's GUID to the `NetCfgInstanceId` value.

Note that the second nibble of the MAC address must be '2', '6', 'A', or 'E'. This is because the second-least significant bit of the most significant byte of the address is `1` if your address is locally administered, or `0` if it universally administered. Universally administered addresses are assigned by the device's manufacturer, so your universally administered address is your original address. Since we are locally changing the MAC address, the second-least significant bit of the first byte must be `1`. The least significant bit of the first byte must also be `0` because your adapter is using unicast transmission (i.e., only one NIC is receiving frames).
Note that the second nibble of the MAC address must be '2', '6', 'A', or 'E'. This is because the second-least significant bit of the most significant byte of the address is `1` if your address is locally administered, or `0` if it is universally administered. Universally administered addresses are assigned by the device's manufacturer, so your universally administered address is your original address. Since we are locally changing the MAC address, the second-least significant bit of the first byte must be `1`. The least significant bit of the first byte must also be `0` because your adapter is using unicast transmission (i.e., only one NIC is receiving frames).

With the second-least significant bit of the first byte as `1` and the least significant bit of the first byte as `0`, only '2', '6', 'A', or 'E' are possible hex values for the second nibble.

Expand All @@ -16,7 +16,7 @@ By default, mac-spoofer modifies the MAC address of the network adapter that cur

and the executable will set the named adapter to the new MAC address.

The new MAC addresss of the adapter is pseud-randomly generated, unless specified. You can use the `-s` option to specify a specific address to set the MAC address too, like
The new MAC addresss of the adapter is pseudo-randomly generated, unless specified. You can use the `-s` option to specify a specific address to set the MAC address too, like

`mac-spoofer -s <address>`

Expand Down

0 comments on commit 963324c

Please sign in to comment.