Jump to content











Photo
- - - - -

SecNet -- A PeNetCfg Replacement w/ MAC Address Spoofing (0.1.15)


  • Please log in to reply
4 replies to this topic

#1 rt10k

rt10k

    Newbie

  • Members
  • 11 posts
  • Location:Livermore, CA, USA
  •  
    United States

Posted 23 September 2007 - 08:47 AM

The aims of this project:
* Achieve the same functionality as PeNetCfg, but do it better, and with network security in mind
* Allow the user to apply a spoofed MAC Address before any network communication is made

So far, it can:
* Detect network hardware and enable network services (With the help of BartPE.exe and net.exe)
* Allow the user to apply a spoofed MAC Address before any network communication is made

A BIG THANK YOU to "TERRYHOAX" for posting this: http://tinyurl.com/3xlagc
This project's network setup routine is very much like the one I've included in the attached file (/src/netcfg.cmd)

I've attached the current progress (source code included) to this posting.

To get it working:
1) Press "OK" or "Apply"
2) Wait for the hardware to be detected, the services to be installed (This takes a while)
3) Take a look at your "ipconfig /all" results to find a randomly generated MAC address along with your network devices being setup :loleverybody:

The current GUI is horrible. I'd appreciate some suggestions on how it ought to be designed.
Any other functionality you'd like to see in it? Shoot.

Attached Files



#2 Brito

Brito

    Platinum Member

  • .script developer
  • 10616 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 23 September 2007 - 10:55 AM

Welcome to boot land rt10k!

I've downloaded and tested your app - unfortunately I don't use bartpe.exe nor factory.exe - we use PE network from holger which works really good.

Bart didn't allow us to include any of his files on our projects and holger proposed a free alternative.

http://holger.boot-land.net/
http://www.boot-land...twork-t976.html

----------------------------------

Improvements - about UI, maybe adding a manifest files to make it use the new buttons and style.

Starting out the app - it detected correctly all network devices.

:loleverybody:

#3 rt10k

rt10k

    Newbie

  • Members
  • 11 posts
  • Location:Livermore, CA, USA
  •  
    United States

Posted 23 September 2007 - 12:33 PM

Looks like Holger's app will do the trick, except for MAC Address spoofing.
I'd love to help get it implemented into PENetwork.

Its just about as simple as setting this value into the registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}001]
"NetworkAddress"="112233445566"

"0001" becomes whichever network device you want to spoof the MAC on, and "112233445566" becomes whatever MAC you would like to spoof as.

It needs to be set after the desired network card has been detected, and the key which "NetworkAddress" resides in has been created, but before the card has been fully setup, otherwise you'll need to stop and restart the card again, and will end up spilling the unspoofed MAC on the network before getting the spoofed MAC setup.

#4 Brito

Brito

    Platinum Member

  • .script developer
  • 10616 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 23 September 2007 - 01:29 PM

The app is written in autoIt - maybe you'd like to get in touch and send him a personal message.. :loleverybody:

If you're in the mood to code and create something new then you're in the right place because we're always looking for new challenges to bring on these boot disks, welcome to our group.. :w00t:

#5 booty#1

booty#1

    Frequent Member

  • .script developer
  • 285 posts
  • Location:Near Frankfurt
  •  
    Germany

Posted 07 November 2007 - 04:20 PM

Its just about as simple as setting this value into the registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}001]
"NetworkAddress"="112233445566"

"0001" becomes whichever network device you want to spoof the MAC on, and "112233445566" becomes whatever MAC you would like to spoof as.

It needs to be set after the desired network card has been detected, and the key which "NetworkAddress" resides in has been created, but before the card has been fully setup, otherwise you'll need to stop and restart the card again, and will end up spilling the unspoofed MAC on the network before getting the spoofed MAC setup.

MAC adress spoofing - nice feature. That is really handy in MAC-based VLAN's. Boot your PE and therefore temporary move the booted PC into a different VLAN for making e.g. a backup of it via LAN...

BTW: Is the way of setting a MAC adress the same way the device manager uses when you change the MAC via the property page of the corresponding network adapter?

booty#1




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users