Tuesday, August 4, 2009

Bypass URL Redirects with MAC Spoofing

It's not difficult to bypass a URL redirect by spoofing the MAC address of an authorized computer. All you need is a laptop and Wireshark.

Here are the steps:
  1. Boot to Linux and verify that your eth0 connection is enabled and connected to the network. You can check this my running: ifconfig
  2. Next run wireshark
  3. Click on the Start Capture button and then select the configuration button for you eth0 device
  4. Create a filter that only captures Ethernet ARP packets
  5. Start the capture
  6. Wait until another computer connects to the network (this may take some time to get a machine that is authorized)
  7. When they communicate with the server an ARP packet will be sent with that computers MAC address
  8. Record the MAC address and stop the capture
  9. Open a terminal
  10. Type: macchanger --mac <copy the new MAC address here> eth0
  11. Check that your MAC address is now the same as the other computer: ifconfig
  12. Type: /etc/init.d/networking stop
  13. Type: /etc/init.d/networking start
  14. Open a browser and verify to that you now bypass the URL redirect and can now browse the internet

No comments:

Post a Comment