MODULE - 4 MAC Spoofing
MODULE - 4 MAC Spoofing
The method used by switches to populate the MAC address table leads to a
vulnerability known as MAC spoofing. Spoofing attacks occur when one host masquerades
or poses as another to receive otherwise inaccessible data or to circumvent security
configurations.
MAC spoofing attacks occur when an attacker alters the MAC address of their host
to match another known MAC address of a target host. The attacking host then sends a
frame throughout the network with the newly configured MAC address. When the switch
receives the frame, it examines the source MAC address. The switch overwrites the current
MAC address table entry and assigns the MAC address to the new port. It then inadvertently
forwards frames destined for the target host to the attacking host.
Hands on Lab
MAC Address Spoofing
In this Lab MAC Spoofing would be perform on LAN adapter (eth0) using two methods.
I. A random MAC address generated by Macchanger on Kali Linux.
II. Change to a Specific MAC address
The following steps would be used to check current MAC address on interface "eth0"
1. From the desktop of Kali (10.0.0.11) machine, open the terminal to check the present MAC
address of "interface eth0" (LAN interface) use following command.
macchanger -s eth0
where -s, used for show
The following steps would be used to change current MAC address of interface "eth0"
3. Before changing the MAC address ,turned off network interface “eth0”, by executing following
command.
4. Now change network card's hardware MAC address to some random hexadecimal numbers,
by giving following command.
macchanger -r eth0
-r: random hexadecimal numbers
The following steps would be used to check current MAC address of interface "eth0"
6. To check changed MAC address bring network interface "eth0" up by following
command
ifconfig eth0 up
The following procedure on Kali Linux can be used to spoof MAC address by Giving
Specific MAC address.
8. Open terminal of Kali (10.0.0.11) machine, Make turned off network
interface eth0”before
changing the MAC address.
11. Bring network interface "eth0" up and display new MAC address using following
command
" ifconfig eth0 up"