There are two (2) kinds: Randomized vs. Locally Administered Addresses
There is a bit which gets set in the OUI portion of a MAC address to signify a randomized vs. locally administered address.
The quick synopsis is look at the second character in a MAC address, if it is a 2, 6, A, or E it is a randomized address.
Wi-Fi Address 92:B1:B8:42:D1:85 is a randomized address, because the second character is a 2.
The MAC Addresses are 48-bit in length, 24-bit for the OUI, and 24-bit for the Network Interface Controller.
___________________________________________________________
Pay attention to this part:
It determines your Operating System
Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS
Colon-Hexadecimal notation = MM:MM:MM:SS:SS:SS
Period-separated Hexadecimal notation = MMM.MMM.SSS.SSS
Windows uses Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS |||
For example: 00-14-22-04-25-37
MacOS uses Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS ||| For example: 00-14-22-04-25-37
Linux OS uses Colon-Hexadecimal notation
Cisco Systems uses Period-separated Hexadecimal notation.
___________________________________________________________
REMEMBER YOU DON'T WANT 2, 6, A or E as it signifies a randomized address.
REMEMBER YOU WANT A GLOBALLY UNIQUE MAC ADDRESS NOT A RANDOM LOCALLY ADMINISTERED ONE
___________________________________________________________
Browse the Browse MAC Address Database:
https--------www-----macvendorlookup-----com/browse
This tool will display the name of the company that manufactured a specific network device based on its MAC Address.
___________________________________________________________
MAC Address Lookup:
https://-----------api[dot]viewdns[dot]info/maclookup/
___________________________________________________________
What is an OUI MAC Address?
It's the part of the MAC Address that defines the hardware manufacturer.
It's the leftmost six digits (24 bits), also called prefixes, and is associated with the hardware manufacturer.
The OUI of some well-known manufacturers are as follow:
Dell: 00-14-22
Nortel: 00-04-DC
Cisco: 00-40-96
Belkin: 00-30-BD
Huawei: 00-9A-CD
Hewlett Packard: 3C-D9-2B
Google, Inc: 3C-5A-B4
Linksys (Cisco Systems): 00-13-10
Linksys (Cisco Systems): 00-25-9C
Linksys (Cisco Systems): 68-7F-74
-----You want your system to match-----not be random
Universal/Local and Individual/Group bits in MAC addresses
Universally administered Locally administered
x0‑xx‑xx‑xx‑xx‑xx x2‑xx‑xx‑xx‑xx‑xx
x4‑xx‑xx‑xx‑xx‑xx x6‑xx‑xx‑xx‑xx‑xx
x8‑xx‑xx‑xx‑xx‑xx xA‑xx‑xx‑xx‑xx‑xx
xC‑xx‑xx‑xx‑xx‑xx xE‑xx‑xx‑xx‑xx‑xx
Multicast (group) Locally administered
x1‑xx‑xx‑xx‑xx‑xx x3‑xx‑xx‑xx‑xx‑xx
x5‑xx‑xx‑xx‑xx‑xx x7‑xx‑xx‑xx‑xx‑xx
x9‑xx‑xx‑xx‑xx‑xx xB‑xx‑xx‑xx‑xx‑xx
xD‑xx‑xx‑xx‑xx‑xx xF‑xx‑xx‑xx‑xx‑xx
MAC Addresses
49:04:88:07:52:28
b1:5b:e8:6b:d0:da
6d:f2:00:ee:6d:c1
9e:9f:ac:26:cc:e5
2f:16:f8:7f:81:3c
d7:45:21:d3:59:1a
36:7e:be:32:05:8f
a3:61:9b:7f:ca:35
f2:f4:6a:31:64:97
30:1f:3e:a5:ab:b6
92:f6:e2:f5:e7:ba
82:33:9e:41:cc:4a
d2:b5:6a:bf:3c:6b
16:f9:78:b5:92:21
8a:e1:46:d5:4c:5c
9b:7f:dd:4e:65:07
c4:9b:7e:97:02:c3
29:3a:b8:aa:31:0c
47:d9:61:12:45:d6
a0:a7:31:cb:50:f1
7a:46:1d:1e:c6:06
b3:b1:78:2a:10:a7
cc:7a:87:cc:1b:10
e6:69:46:de:de:b9
95:57:26:fe:73:d4
be:26:dd:ae:b2:98
41:b5:7b:be:86:a1
f3:b6:8a:4e:52:bb
63:3c:de:4c:aa:f1
6d:9f:97:58:8c:2b
88:0a:e7:ee:3e:7b
9d:45:09:f2:97:1b
37:39:59:b6:23:6d
4a:e0:b6:60:ff:50
65:a5:9d:0b:3e:74
b2:db:96:83:2f:6b
2c:aa:1a:c3:d7:2f
ec:2a:64:8e:b9:18
68:0b:90:62:83:65
fa:11:ab:2d:c0:57
d2:a7:ec:88:11:02
9b:15:da:e3:4a:a4
01:b3:ff:bb:ba:1c
74:b7:f9:90:19:66
bb:ac:2e:2c:77:5a
f0:33:53:59:70:5b
1a:fb:7d:15:68:74
58:cc:01:29:bc:34
c7:5a:28:fb:62:e2
b2:be:6a:5d:e9:01
d6:30:66:44:41:6a
33:45:22:f0:33:cf
d8:e8:e1:fa:85:42
e9:47:42:de:c8:c0
d6:c2:91:6c:61:f3
28:61:08:3f:44:4d
c6:80:05:17:82:88
05:ef:28:2e:f1:b4
35:44:75:24:28:f2
61:6a:33:31:99:a1
b2:95:a2:33:0a:1e
32:98:17:25:a7:c1
e2:bb:f0:dc:cd:48
3c:7e:92:af:87:87
40:59:70:37:38:ad
b7:3a:6b:a4:87:2a
97:ca:3e:84:5b:9d
48:36:0f:38:07:2e
fe:4a:20:43:87:df
f7:f5:0f:b7:4a:f8
49:ef:4a:6b:6a:34
93:d4:9f:52:29:f2
6f:d6:ff:35:74:66
93:fd:0f:08:89:f0
88:53:bc:00:43:04
31:10:e3:ff:9f:a0
5f:a8:41:fe:b2:6f
1f:3f:ed:0f:d3:6e
09:c6:b3:5a:51:67
9f:61:e5:0a:a0:bf
de:e3:19:cd:cf:bc
f1:60:50:ed:5a:85
36:0d:e8:b1:c5:7d
f1:18:49:a5:ac:0e
1d:db:ea:06:ad:43
18:38:2e:a1:a2:9a
c4:f0:2e:a3:9c:f9
00:21:71:61:f6:44
10:bc:2b:b1:41:fd
e7:6b:b0:fc:40:2d
cb:4a:36:8f:68:fd
b4:b7:58:cf:e3:bb
ad:5a:54:8f:1c:b4
49:bc:f9:bf:db:f1
7f:0d:e3:bc:c6:81
df:a8:a9:d5:93:dc
59:39:b8:7c:91:32
f8:5c:d1:a2:54:d4
0a:b0:b2:ae:0f:a6
8b:83:ab:77:d9:be
00:ff:84:f1:5c:e3
bc:1a:88:cb:a9:7d
a4:92:3b:01:08:fb
f8:3b:b2:7b:13:3a
ce:ae:2c:a9:9f:cd
fd:c6:fc:b3:52:89
96:c6:d0:fe:a9:5f
03:91:48:37:bc:ef
85:fe:df:50:52:ff
e6:b4:a8:a5:07:fe
93:56:47:95:c5:3f
2c:7c:85:4d:10:43
86:1f:bd:b5:ca:27
83:2e:b6:54:ae:8c
c7:8e:0f:63:2c:b8
b4:3b:99:32:2b:82
af:65:4a:a4:35:15
7b:d3:40:4b:bf:5b
36:86:4b:06:1c:07
2b:3d:ae:62:c0:02
b4:6d:6e:07:26:de
45:b7:2c:3e:47:e7
70:5b:4c:e6:ec:47
49:c4:ee:17:75:ca
9f:d1:1b:6c:36:7f
59:be:e1:b9:8f:bc
8a:69:5f:6b:3b:6b
11:ef:44:00:94:2e
7b:61:25:8c:9a:b3
0c:e2:b3:4c:6c:53
66:f1:6a:e6:3e:63
28:77:1f:46:51:55
1b:cd:9e:78:5a:0a
51:ac:11:11:e8:8e
fe:75:b3:c8:bd:6c
1f:51:40:d8:5e:ec
91:52:2f:d9:3f:67
58:9a:ba:ea:01:fe
d9:a8:d8:40:28:36
40:2a:51:f9:9d:9d
a0:78:07:c7:1e:3c
9a:1f:ad:05:f7:08
44:d3:f0:2d:8d:78
01:0a:52:49:8e:b7
19:77:f7:90:94:d0
e2:86:73:ea:bd:3e
a5:94:83:13:19:96
54:3d:94:73:6e:c6
db:d2:97:4d:5e:84
48:eb:61:1e:3c:db
1b:67:18:8e:28:9a
03:bd:2f:02:6a:c1
7e:1a:c0:da:e1:7f
7f:4d:ed:18:2e:0b
42:43:68:81:11:a0
d1:42:bc:f3:76:ea
bc:de:87:96:7c:a6
ab:2b:6d:21:c5:5d
26:31:db:4b:e5:b8
84:bd:03:d5:f5:03
4a:c3:ba:26:66:0f
fa:23:9d:44:fa:34
fc:b1:22:2b:e0:ac
11:b5:8f:83:95:72
08:55:de:2a:18:e6
48:7b:7f:dc:3f:f4
e1:da:f2:32:02:96
a2:4d:df:c9:63:cf
64:32:21:79:5f:ed
59:e1:03:c1:ea:6b
c6:36:cf:73:09:a4
13:00:33:fc:51:5b
28:64:96:cb:01:86
ec:ed:1e:ff:92:71
36:09:3c:b7:b2:db
da:10:9e:87:60:71
6c:b3:e3:31:65:24
4d:8e:7b:82:38:a3
08:f7:a2:b1:e8:b6
3d:8d:d4:99:86:ef
dc:14:49:c9:ca:86
fd:4b:54:74:40:14
6e:2e:61:48:7c:39
27:d0:11:e8:7a:9e
20:c3:2f:6d:06:3f
2b:ed:15:b1:94:8e
6f:b5:e6:f3:01:96
a1:7c:51:fb:eb:e0
c7:aa:20:fe:4a:e3
a4:3b:7d:5e:fb:05
ff:52:fd:0c:d0:76
a6:8c:89:c2:fe:40
20:30:53:99:28:4d
38:85:29:d9:0b:6c
2d:58:57:42:ba:ec
bb:29:8d:4e:89:89
44:cd:05:fc:59:14
e7:95:bb:36:db:bb
7e:59:c2:06:dc:29
e6:21:90:ff:cb:07
63:02:34:96:a5:9a
35:b4:ea:ae:03:ea
ed:0e:b5:81:42:05
70:bb:a0:66:24:eb
42:30:3e:88:81:19
b7:93:23:24:81:7e
af:4b:59:87:2f:ad
69:c2:7a:7b:6f:36
53:49:ec:1c:fa:76
d9:af:28:94:42:d9
b0:d2:a5:89:87:42
ca:6f:a5:c4:e5:26
11:b8:83:e9:dc:89
5a:c2:ad:05:32:df
c8:15:4a:4d:1f:5f
c1:70:bc:e4:63:d4
b0:cb:b5:fe:13:f8
be:a1:40:28:07:fa
26:1d:35:be:a4:7e
72:a5:6d:84:90:1a
ef:1a:74:64:9f:05
15:3f:f4:17:9e:d4
3d:46:57:83:da:b5
03:b2:69:53:ef:ae
5d:ec:ba:f3:40:b1
bd:64:5f:51:84:ac
e8:4a:02:88:69:46
a5:15:87:99:91:81
f5:b4:25:6d:66:ad
d2:e3:78:49:28:e2
a6:c7:f1:f5:ac:95
8c:e7:49:bb:68:cc
d5:4e:67:4d:1a:e2
96:d4:23:14:99:55
91:77:5d:54:ce:3e
cc:94:d2:b3:55:d5
20:bd:d5:8b:1a:f3
05:64:48:7e:37:61
13:31:7d:6a:c9:2c
53:60:49:c3:d5:9e
1f:05:5b:51:e8:fb
/u/imgonnagetusucka · 4 votes · 11 months ago · Link
I really hope you noobs know more about networking than this. MAC addresses are fucking layer 2. That means the source MAC in your packet will be changed as soon as it leaves your router/gateway, the source MAC will then be your routers until it hits the next hop, probably an ISP router, and guess what the SRC MAC becomes that router's MAC and so on. Run wireshark for 2 seconds and you will see the destination mac will always be the mac of your router, NOT the site you just visited. The SRC and DST MAC will change on each hop, you are wasting your time with all of this BS. The only time it would matter if you spoofed your MAC is if the goddamn store you are carding is sitting on your LAN.
/u/HeadJanitor OPSEC
· 2 votes
· 11 months ago
· Link
I think that that's there only concern: connecting to a public WiFi. I'm pretty sure I've gone over, many times, that MAC addresses stay at layer 2 and at their height are used in ARPing. They're just doing their thing.
/u/yappy · 1 votes · 4 months ago · Link
Greatest... :D (PDNTSPA).
/u/joejoe88 · 3 votes · 11 months ago · Link
i have no interest in carding but this is a g o l d e n source of opsec info. thanks a lot daddy janitor
/u/HeadJanitor OPSEC
· 2 votes
· 11 months ago
· Link
You're an ace. May the good stuff keep coming. Enjoy your weekend.
/u/[deleted] · 2 votes · 11 months ago · Link
I have two questions about changing the mac address. they might seem stupid sorry am a beginner. I use the Tmac program to change the mac address and select wifi, is that ok? My second question would be do I have to change the mac address of the vm or my pc. I agree with mine pc but am not sure
/u/HeadJanitor OPSEC
· 3 votes
· 11 months ago
· Link
You can change both. Theoretically, you change your PC's MAC address because your router/switch ARPs your PC by looking up its MAC address to forward frames to.
Do both just to be safe depending on whether you are using a bridged or NAT schematic.
You can use Tmac -- the goal of the post was to get to the precision of a non-random MAC address; not artificially produced by human input, to make it look factory-made.
/u/[deleted] · 2 votes · 11 months ago · Link
Thank you very much , but i have a last question is that correctly to change the mac adress at tmac with Network connections wifi?
/u/HeadJanitor OPSEC
· 2 votes
· 11 months ago
· Link
It doesn't matter if it's WiFi, Ethernet, USB--you are changing the MAC address associated with a network interface.
/u/Harlom · 1 votes · 1 year ago · Link
Seriously underrated post, will help a lot of newbies.
/u/HeadJanitor OPSEC
· 2 votes
· 1 year ago
· Link
Thank you. Hope it does. The closer you get to the real OEM machine, the less of an anomaly you are.
/u/GoldenGuru69 · 1 votes · 8 months ago · Link
Appreciate this my friendly Janitorial brother, as one of those newbies, this is something that isn't parroted again and again and again but actually has great significance. It's been added to my overwhelming stack of resources!
/u/HeadJanitor OPSEC
· 1 votes
· 8 months ago
· Link
Sweet, I really hope it works out for you. Best of luck and enjoy!
/u/DTCEmpire007 · 1 votes · 1 year ago · Link
Thank uu
/u/HeadJanitor OPSEC
· 3 votes
· 1 year ago
· Link
Anytime.
/u/DTCEmpire007 · 1 votes · 1 year ago · Link
bro i have phished a ton of cc, how can i cash em out on another continent they from africa, southern zimbabwe, if you help me i will give you 2 gold cc for free
/u/HeadJanitor OPSEC
· 1 votes
· 1 year ago
· Link
Truth be told, I've never carded in my life. I just know the fundamentals.
/u/DTCEmpire007 · 1 votes · 1 year ago · Link
ok bro no problemo
/u/BIGCASHIN44 · 1 votes · 7 months ago · Link
Why not Sell them?Or use them for PayPal.are they avs?
/u/dontknowwhat56 · 1 votes · 1 year ago · Link
Amazing pos, probaly the post i was just looking for. Thanks alot mate!
/u/HeadJanitor OPSEC
· 2 votes
· 1 year ago
· Link
I'll keep them coming. Hope they serve well.
/u/Nulloid · 1 votes · 1 year ago · Link
Good shit, thank you for this!
/u/HeadJanitor OPSEC
· 2 votes
· 1 year ago
· Link
Thank PlayBoy, anytime.
/u/songokuchichi · 1 votes · 9 months ago · Link
very useful thank you
/u/HeadJanitor OPSEC
· 1 votes
· 9 months ago
· Link
You are welcome. Good luck.
/u/mrcashouty · 1 votes · 8 months ago · Link
[removed by moderators]
/u/networkhackpro · 1 votes · 8 months ago · Link
[removed]
/u/Flex9001 · 1 votes · 8 months ago · Link
In essence, the ones below are actually the localize ones(Recommended)? Just asking
b1:5b:e8:6b:d0:da
6d:f2:00:ee:6d:c1
9e:9f:ac:26:cc:e5
2f:16:f8:7f:81:3c
d7:45:21:d3:59:1a
36:7e:be:32:05:8f
a3:61:9b:7f:ca:35
f2:f4:6a:31:64:97
30:1f:3e:a5:ab:b6
92:f6:e2:f5:e7:ba
82:33:9e:41:cc:4a
d2:b5:6a:bf:3c:6b
16:f9:78:b5:92:21
8a:e1:46:d5:4c:5c
9b:7f:dd:4e:65:07
c4:9b:7e:97:02:c3
29:3a:b8:aa:31:0c
47:d9:61:12:45:d6
a0:a7:31:cb:50:f1
7a:46:1d:1e:c6:06
b3:b1:78:2a:10:a7
cc:7a:87:cc:1b:10
e6:69:46:de:de:b9
95:57:26:fe:73:d4
be:26:dd:ae:b2:98
41:b5:7b:be:86:a1
f3:b6:8a:4e:52:bb
63:3c:de:4c:aa:f1
6d:9f:97:58:8c:2b
88:0a:e7:ee:3e:7b
9d:45:09:f2:97:1b
37:39:59:b6:23:6d
4a:e0:b6:60:ff:50
65:a5:9d:0b:3e:74
b2:db:96:83:2f:6b
2c:aa:1a:c3:d7:2f
ec:2a:64:8e:b9:18
/u/HeadJanitor OPSEC
· 1 votes
· 8 months ago
· Link
Basically the goal was not to just make random MAC addresses but quasi-clone what would be real MAC address as every manufacturer is designated it's own "Organizationally Unique Identifier".
8C:1F:64:8F:4 MA-S Loadrite (Auckland) Limited NZ
A4:51:5E MA-L Juniper Networks US
D4:AD:20 MA-L Jinan USR IOT Technology Limited CN
88:9C:AD MA-L Cisco Systems, Inc US
D8:83:32 MA-L TaiXin Semiconductor Co., Ltd CN
1C:FC:17 MA-L Cisco Systems, Inc US
BC:5E:33 MA-L Hangzhou Hikvision Digital Technology Co.,Ltd. CN
00:5C:C2 MA-L SHENZHEN MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD. CN
34:1B:2D MA-L Cisco Systems, Inc US
78:F1:C6 MA-L Cisco Systems, Inc
/u/Kodakblackzzz · 1 votes · 8 months ago · Link
i wonder was this my problem when i use random my mac address and i wasnt able to access internet connection my broswer was slow and not connecting
so if i use one of your mac address you recommended will it fix my problem?
/u/HeadJanitor OPSEC
· 1 votes
· 8 months ago
· Link
Perhaps, by trying to get as close to the real authentic thing as possible it won't raise a flag.
/u/[deleted] · 1 votes · 8 months ago · Link
When i try to change my mac adress with tmac . Its not working ,there is the Pop up and say its need to beginn with 02. What can i do ?
/u/HeadJanitor OPSEC
· 1 votes
· 8 months ago
· Link
See if you have the option to change it in Device Manager under "Locally Administered Address".
/u/drethedino · 1 votes · 7 months ago · Link
Guys I am left with no choice, but i would need to use my own Ethernet. Here when I change my MAC, the new mac is identified by my ISP right so whats the use of changing my mac? Or
Or can i use a rooted phone, with sim card that doesn't link to me, then take a WiFi to my computer & change my MAC?
Or can i use 4g wifi hotspot device with a sim of not mine
I am actually using VeraCrypt so do I dont need think of the mac?
/u/HeadJanitor OPSEC
· 1 votes
· 7 months ago
· Link
You change the MAC to prove that the original MAC wasn't there.
/u/drethedino · 1 votes · 7 months ago · Link
Even after changing the mac, as I am using the ethernet, my isp will still record the mac which ws used right?
/u/HeadJanitor OPSEC
· 1 votes
· 7 months ago
· Link
Your ISP sees 1st the MAC of the Cable Modem, then if they really wanted to they could do an "arp" for all the MAC addresses (if). So, in this case, they would see bogus MAC addresses unbeknownst to them.
/u/drethedino · 1 votes · 7 months ago · Link
Got it, but one last thing are you refering to chaneg the main pc mac or the one which is in vm ?
/u/HeadJanitor OPSEC
· 1 votes
· 7 months ago
· Link
To be safe, I would do both. The VM one is a breeze anyway. To be accurate, your MAC address doesn't hit the Internet as it's a layer 2 identifier -- your router speaks to all devices by first obtaining their MAC addresses until leasing each an IP.
/u/drethedino · 1 votes · 7 months ago · Link
Thanks a lot for your response
/u/HeadJanitor OPSEC
· 1 votes
· 7 months ago
· Link
Anytime
/u/drethedino · 1 votes · 7 months ago · Link
Another question of mine. when I changed my dns to OPENIC, since then I feel my internet is very slow while browsing vpn ==> Tor. The internet is fine on Just vpn but not at tor, should i change my dns to google ? I don't want to switch back to my ISP Default
2. Which can is considered as real OPSEC
A. Burner ==> VM ==> Carding
B. Burner ==> VM ==> RDP ==> Carding
I personally believe A should be good as in B option we are disclosing our VPN IP to the RDP, where as the proxy would be the end point in the VM
Whats you're view?
/u/HeadJanitor OPSEC
· 1 votes
· 7 months ago
· Link
Google is common-stalk. Good way to fit in.
/u/joker0393 · 1 votes · 6 months ago · Link
Thanks fot tor this
I using TP link adapter. When i try to change in Tmac it always shows failed. 02 also used.
2. Do mac address really matters? High security can detect it online? Mean ISP shows them our mac right? So is it risky and traceable?
/u/HeadJanitor OPSEC
· 1 votes
· 6 months ago
· Link
Sorry about my delay - the MAC address just shows that that device was there using that network.
Yeah, using a non-built-in one may be difficult to change as it is burned-in.
/u/SKYSTARR10 · 1 votes · 6 months ago · Link
source mac addresses!
/u/HeadJanitor OPSEC
· 1 votes
· 6 months ago
· Link
Absolutely. MAC IDs are only used for link-local communications, though in these scenarios the destination mac address isn't of concern because you are the client and the client MAC address will be the source MAC address.
/u/Saskia · 1 votes · 4 months ago · Link
I have question about change the mac adress. I use tmac what i need to use change the mac at wifi or choose virtual Box at the tmac .i want to use a vm
/u/HeadJanitor OPSEC
· 1 votes
· 4 months ago
· Link
Do both. In the end, your host is just doing to the communicating for the guest, anyway.