mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-03-21 02:10:11 +08:00
[翻译完成]How to spoof the MAC address of a network interface on Linux
This commit is contained in:
bazz
parent
4523c26032
commit
1428638c9d
@ -1,122 +0,0 @@
|
||||
[bazz2 #$*@!^#@%]
|
||||
How to spoof the MAC address of a network interface on Linux
|
||||
================================================================================
|
||||
A 48-bit MAC address (e.g., 08:4f:b5:05:56:a0) is a globally unique identifier associated with a physical network interface, which is assigned by a manufacturer of the corresponding network interface card. Higher 24 bits in a MAC address (also known as OUI or "Organizationally Unique Identifier") uniquely identify the organization which has issued the MAC address, so that there is no conflict among all existing MAC addresses.
|
||||
|
||||
While a MAC address is a manufacturer-assigned hardware address, it can actually be modified by a user. This practice is often called "MAC address spoofing." In this tutorial, I am going to show **how to spoof the MAC address of a network interface on Linux**.
|
||||
|
||||
### Why Spoof a MAC Address? ###
|
||||
|
||||
There could be several technical reasons you may want to change a MAC address. Some ISPs authenticate a subscriber's Internet connection via the MAC address of their home router. Suppose your router is just broken in such a scenario. While your ISP re-establishes your Internet access with a new router, you could temporarily restore the Internet access by changing the MAC address of your computer to that of the broken router.
|
||||
|
||||
Many DHCP servers lease IP addresses based on MAC addresses. Suppose for any reason you need to get a different IP address via DHCP than the current one you have. Then you could spoof your MAC address to get a new IP address via DHCP, instead of waiting for the current DHCP lease to expire who knows when.
|
||||
|
||||
Technical reasons aside, there are also legitimate privacy and security reasons why you wish to hide your real MAC address. Unlike your layer-3 IP address which can change depending on the networks you are connected to, your MAC address can uniquely identify you wherever you go. Call me a paranoid, but you know what this means to [your privacy][1]. There is also an exploit known as [piggybacking][2], where a hacker snoops on your MAC address on a public WiFi network, and attempts to impersonate you using your MAC address while you are away.
|
||||
|
||||
### How to Spoof a MAC Address Temporarily ###
|
||||
|
||||
On Linux, you can switch MAC addresses temporarily at run time. Note that you will lose your network connection momentarily during MAC address transition. In this case, the changed MAC address will revert to the original when you reboot. On Linux, there are several easy ways to change a MAC address at run time.
|
||||
|
||||
#### Method One: iproute2 ####
|
||||
|
||||
$ sudo ip link set dev eth0 down
|
||||
$ sudo ip link set dev eth0 address 00:00:00:00:00:01
|
||||
$ sudo ip link set dev eth0 up
|
||||
|
||||
#### Method Two: macchanger ####
|
||||
|
||||
A command-line utility called macchanger allows you to change MAC addresses from known vendor list.
|
||||
|
||||
To install macchanger on Debian, Ubuntu or Linux Mint:
|
||||
|
||||
$ sudo apt-get install macchanger
|
||||
|
||||
To install macchanger on Fedora:
|
||||
|
||||
$ sudo yum install macchanger
|
||||
|
||||
To install macchanger on CentOS or RHEL:
|
||||
|
||||
$ wget http://ftp.club.cc.cmu.edu/pub/gnu/macchanger/macchanger-1.6.0.tar.gz
|
||||
$ tar xvfvz macchanger-1.6.0.tar.gz
|
||||
$ cd macchanger-1.6.0
|
||||
$ ./configure
|
||||
$ make
|
||||
$ sudo make install
|
||||
|
||||
The following examples are some of advanced usages of macchanger. With macchanger, you no longer have to deactivate/reactivate a network interface manually.
|
||||
|
||||
To spoof a MAC address to a different value:
|
||||
|
||||
$ sudo macchanger --mac=00:00:00:00:00:01 eth0
|
||||
|
||||
To spoof a MAC address to a random value while preserving the same OUI:
|
||||
|
||||
$ sudo macchanger -e eth0
|
||||
|
||||
To spoof a MAC address to a completely random value:
|
||||
|
||||
$ sudo macchanger -r eth0
|
||||
|
||||
To get all MAC address OUIs associated with a particular vendor (e.g., Juniper):
|
||||
|
||||
$ macchanger -l | grep -i juniper
|
||||
|
||||
|
||||
|
||||
To show the original permanent and spoofed MAC addresses:
|
||||
|
||||
$ macchanger -s eth0
|
||||
|
||||
> Current MAC: 56:95:ac:ee:6e:77 (unknown)
|
||||
> Permanent MAC: 00:0c:29:97:68:02 (Vmware, Inc.)
|
||||
|
||||
### How to Spoof a MAC Address Permanently ###
|
||||
|
||||
If you want to spoof your MAC address permanently across reboots, you can specify the spoofed MAC address in interface configuration files. For example, if you want to change the MAC address of eth0, do the following.
|
||||
|
||||
#### On Fedora, CentOS or RHEL: ####
|
||||
|
||||
$ sudo vi /etc/sysconfig/network-scripts/ifcfg-eth0
|
||||
|
||||
> DEVICE=eth0
|
||||
> MACADDR=00:00:00:00:00:01
|
||||
|
||||
Alternatively, you can create a custom startup script in /etc/NetworkManager/dispatcher.d as follows, especially if you are using Network Manager. I assume that you already installed macchanger.
|
||||
|
||||
$ sudo vi /etc/NetworkManager/dispatcher.d/000-changemac
|
||||
|
||||
> #!/bin/bash
|
||||
>
|
||||
> case "$2" in
|
||||
> up)
|
||||
> macchanger --mac=00:00:00:00:00:01 "$1"
|
||||
> ;;
|
||||
> esac
|
||||
|
||||
$ sudo chmod 755 /etc/NetworkManager/dispatcher.d/000-changemac
|
||||
|
||||
#### On Debian, Ubuntu or Linux Mint: ####
|
||||
|
||||
Create a custom startup script in /etc/network/if-up.d/ as follows.
|
||||
|
||||
$ sudo vi /etc/network/if-up.d/changemac
|
||||
|
||||
> #!/bin/sh
|
||||
>
|
||||
> if [ "$IFACE" = eth0 ]; then
|
||||
> ip link set dev "$IFACE" address 00:00:00:00:00:01
|
||||
> fi
|
||||
|
||||
$ sudo chmod 755 /etc/network/if-up.d/changemac
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: http://xmodulo.com/2014/02/spoof-mac-address-network-interface-linux.html
|
||||
|
||||
译者：[译者ID](https://github.com/译者ID) 校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
|
||||
|
||||
[1]:http://www.identityblog.com/?p=1131
|
||||
[2]:http://en.wikipedia.org/wiki/Piggybacking_(Internet_access)
|
||||
@ -0,0 +1,121 @@
|
||||
Linux 上的 MAC 地址欺骗
|
||||
================================================================================
|
||||
网卡生产商在每一张网卡（NIC）在出厂时都会在上面刻上一个48位的全球唯一标识符（GUID，例如08:4f:b5:05:56:a0），这串 GUID 就是网卡的 MAC 地址，用于确定一张网卡的身份。MAC 地址的高24位叫 OUI(Organizationally Unique Identifier)，是为网卡设置 MAC 地址的组织的标识符，这样一来，不同组织设置的 MAC 地址就不会冲突了。
|
||||
|
||||
虽然 MAC 地址由厂商指定，但用户可以改变它，这就是传说中的“MAC 地址欺骗”。本文将向大家展示**如何在 Linux 上玩 MAC 地址欺骗**。
|
||||
|
||||
### 为什么要玩 MAC 地址欺骗？ ###
|
||||
|
||||
想要理由？这里就给几个比较有技术含量的理由。 一些网络供应商会通过绑定你家路由器上的 MAC 地址来验证你的身份，这个时候如果你的路由器坏了，你怎么办？你可以暂时把你的电脑的 MAC 地址改成你家路由器的 MAC 地址，让你的 ISP 重新将你连入外网。
|
||||
|
||||
很多 DHCP 服务器会依赖 MAC 地址来分配 IP 地址。如果你想换一个分配给你的 IP 地址，你可以改改你的 MAC 地址。这样一来，你不必等着 DHCP 服务器给你重新分一个 IP 地址，而是马上就能得到一个新的。
|
||||
|
||||
除了技术原因外，这里也有一些比较正当的理由来说明你为什么需要改变你的 MAC 地址：为了隐私、为了安全，你要把你真正的 MAC 地址隐藏起来。不像处在 ISO 模型第三层的 IP 地址会经常变来变去，你的 MAC 地址可不会改变。在你说我多疑之前，请确定你知道[你的隐私][1]到底是什么东西。有一个入侵手段叫 [piggybacking][2]，黑客会在公共 WiFi 网络下伪装成你的 MAC 地址，并且在你不在场的时候伪装成你的身份进行黑客活动。
|
||||
|
||||
### 怎么临时性地改变 MAC 地址？ ###
|
||||
|
||||
你可以在 Linux 运行的时候改变 MAC 地址。需要注意的是当 MAC 地址转换的那一会时间，你的网络会掉线。当电脑重启时 MAC 地址又会变回原来的。下面介绍几种方法来改变你的 MAC 地址。
|
||||
|
||||
#### 方法一：iproute2 ####
|
||||
|
||||
$ sudo ip link set dev eth0 down
|
||||
$ sudo ip link set dev eth0 address 00:00:00:00:00:01
|
||||
$ sudo ip link set dev eth0 up
|
||||
|
||||
#### 方法二：macchanger ####
|
||||
|
||||
macchanger 这个命令可以让你把 MAC 地址改成不同生产厂商的序列号。
|
||||
|
||||
在 Debian，Ubuntu 或 Linux Mint 下安装 macchanger：
|
||||
|
||||
$ sudo apt-get install macchanger
|
||||
|
||||
在 Fedora 下安装 macchanger：
|
||||
|
||||
$ sudo yum install macchanger
|
||||
|
||||
在 CentOS 或 RHEL 下安装 macchanger：
|
||||
|
||||
$ wget http://ftp.club.cc.cmu.edu/pub/gnu/macchanger/macchanger-1.6.0.tar.gz
|
||||
$ tar xvfvz macchanger-1.6.0.tar.gz
|
||||
$ cd macchanger-1.6.0
|
||||
$ ./configure
|
||||
$ make
|
||||
$ sudo make install
|
||||
|
||||
下面给出一些 macchanger 的高级使用例子。使用 macchanger 你不必再手动禁用、启用你的网卡。
|
||||
|
||||
仅仅改变 MAC 地址：
|
||||
|
||||
$ sudo macchanger --mac=00:00:00:00:00:01 eth0
|
||||
|
||||
在保证 OUI 一致的情况下为 MAC 设置一个随机地址：
|
||||
|
||||
$ sudo macchanger -e eth0
|
||||
|
||||
为 MAC 设置一个完全随机的地址：
|
||||
|
||||
$ sudo macchanger -r eth0
|
||||
|
||||
获取所有网卡的 MAC 地址，然后只列出指定的厂商（比如 Juniper）:
|
||||
|
||||
$ macchanger -l | grep -i juniper
|
||||
|
||||
|
||||
|
||||
显示一块网卡原来的 MAC 地址和伪装的 MAC 地址：
|
||||
|
||||
$ macchanger -s eth0
|
||||
|
||||
> Current MAC: 56:95:ac:ee:6e:77 (unknown)
|
||||
> Permanent MAC: 00:0c:29:97:68:02 (Vmware, Inc.)
|
||||
|
||||
### 如何永久性地改变 MAC 地址？ ###
|
||||
|
||||
如果你想在系统重启后还保持伪装 MAC 地址，你需要编辑配置文件。比如你想改变 eth0 的 MAC 地址，按以下方法搞起：
|
||||
|
||||
#### 在 Fedora，CentOS 或 RHEL 下： ####
|
||||
|
||||
$ sudo vi /etc/sysconfig/network-scripts/ifcfg-eth0
|
||||
|
||||
> DEVICE=eth0
|
||||
> MACADDR=00:00:00:00:00:01
|
||||
|
||||
或者你可以建一个开机启动的脚本放在 /etc/NetworkManager/dispatcher.d 目录下，前提是你使用 Network Manager 管理你的网络。这里假设你已经装了 macchanger，脚本内容如下：
|
||||
|
||||
$ sudo vi /etc/NetworkManager/dispatcher.d/000-changemac
|
||||
|
||||
> #!/bin/bash
|
||||
>
|
||||
> case "$2" in
|
||||
> up)
|
||||
> macchanger --mac=00:00:00:00:00:01 "$1"
|
||||
> ;;
|
||||
> esac
|
||||
|
||||
$ sudo chmod 755 /etc/NetworkManager/dispatcher.d/000-changemac
|
||||
|
||||
#### 在 Debian，Ubuntu 或 Linux Mint 下： ####
|
||||
|
||||
新建一个开机启动脚本，放在 /etc/network/if-up.d/ 目录下：
|
||||
|
||||
$ sudo vi /etc/network/if-up.d/changemac
|
||||
|
||||
> #!/bin/sh
|
||||
>
|
||||
> if [ "$IFACE" = eth0 ]; then
|
||||
> ip link set dev "$IFACE" address 00:00:00:00:00:01
|
||||
> fi
|
||||
|
||||
$ sudo chmod 755 /etc/network/if-up.d/changemac
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: http://xmodulo.com/2014/02/spoof-mac-address-network-interface-linux.html
|
||||
|
||||
译者：[bazz2](https://github.com/bazz2) 校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
|
||||
|
||||
[1]:http://www.identityblog.com/?p=1131
|
||||
[2]:http://en.wikipedia.org/wiki/Piggybacking_(Internet_access)
|
||||
Loading…
Reference in New Issue
Block a user