2 xxxxx2 xxxxx2 于 2015.07.16 16:36 提问

如何修改从本机发送出去的数据包的MAC地址

例如,本机的MAC地址为: ‎00-1C-47-CE-FE-02,在发送数据包的时候,如何将其修改为‎00-11-42-DF-EE-01
1.不能采用修改网卡的MAC地址的方式,因为修改后的地址是随机动态的,要像方法中的一个参数一样,随时修改,不会影响网络状态,不会闪断
2.修改发送数据包的MAC地址后,要能够接收到返回的数据包
小弟不大懂网络方面的知识,但无奈领导布置了任务,
不知能否实现,能实现,麻烦说明具体实现方法,如不能实现,也麻烦具体说明一下不能实现的理由。
如有兴趣的大神可以加我QQ392124082研究研究
小弟感激不尽

5个回答

yy520a
yy520a   2015.07.18 20:44
已采纳

物理MAC 地址是不能在系统或者程序中修改的,但对方通信端是 web服务器或者电信服务器,修改系统注册表就可以了,能达到模拟真实MAC达到欺骗的目的,本人实测是完全可行的,但同一网域相同的MAC 会冲突,会导致一方不能联网,如果路由端经过ARP双向绑定你是没有任何办法的,这种概率非常低,下面是一个C#实例(非本人所写,但实测可行),可以随机修改也可以改成 指定MAC,主要还是看你要实现什么目的,请详细说明。

public class MACHelper
{
    [DllImport("wininet.dll")]
    private extern static bool InternetGetConnectedState(int Description, int ReservedValue);
    /// <summary>
    /// 是否能连接上Internet
    /// </summary>
    /// <returns></returns>
    public bool IsConnectedToInternet()
    {
        int Desc = 0;
        return InternetGetConnectedState(Desc, 0);
    }
    /// <summary>
    /// 获取MAC地址
    /// </summary>
    public string GetMACAddress()
    {
        //得到 MAC的注册表键
        RegistryKey macRegistry = Registry.LocalMachine.OpenSubKey("SYSTEM").OpenSubKey("CurrentControlSet").OpenSubKey("Control")
            .OpenSubKey("Class").OpenSubKey("{4D36E972-E325-11CE-BFC1-08002bE10318}");
        IList<string> list = macRegistry.GetSubKeyNames().ToList();
        IPGlobalProperties computerProperties = IPGlobalProperties.GetIPGlobalProperties();
        NetworkInterface[] nics = NetworkInterface.GetAllNetworkInterfaces();
        var adapter = nics.First(o => o.Name == "本地连接");
        if (adapter == null)
            return null;
        return string.Empty;
    }
    /// <summary>
    /// 设置MAC地址
    /// </summary>
    /// <param name="newMac"></param>
    public void SetMACAddress(string newMac)
    {
        string macAddress;
        string index = GetAdapterIndex(out macAddress);
        if (index == null)
            return;
        //得到 MAC的注册表键
        RegistryKey macRegistry = Registry.LocalMachine.OpenSubKey("SYSTEM").OpenSubKey("CurrentControlSet").OpenSubKey("Control")
            .OpenSubKey("Class").OpenSubKey("{4D36E972-E325-11CE-BFC1-08002bE10318}").OpenSubKey(index, true);
        if (string.IsNullOrEmpty(newMac))
        {
            macRegistry.DeleteValue("NetworkAddress");
        }
        else
        {
            macRegistry.SetValue("NetworkAddress", newMac);
            macRegistry.OpenSubKey("Ndi", true).OpenSubKey("params", true).OpenSubKey("NetworkAddress", true).SetValue("Default", newMac);
            macRegistry.OpenSubKey("Ndi", true).OpenSubKey("params", true).OpenSubKey("NetworkAddress", true).SetValue("ParamDesc", "Network Address");
        }
        Thread oThread = new Thread(new ThreadStart(ReConnect));//new Thread to ReConnect
        oThread.Start();
    }
    /// <summary>
    /// 重设MAC地址
    /// </summary>
    public void ResetMACAddress()
    {
        SetMACAddress(string.Empty);
    }
    /// <summary>
    /// 重新连接
    /// </summary>
    private void ReConnect()
    {
        NetSharingManagerClass netSharingMgr = new NetSharingManagerClass();
        INetSharingEveryConnectionCollection connections = netSharingMgr.EnumEveryConnection;
        foreach (INetConnection connection in connections)
        {
            INetConnectionProps connProps = netSharingMgr.get_NetConnectionProps(connection);
            if (connProps.MediaType == tagNETCON_MEDIATYPE.NCM_LAN)
            {
                connection.Disconnect(); //禁用网络
                connection.Connect();    //启用网络
            }
        }
    }
    /// <summary>
    /// 生成随机MAC地址
    /// </summary>
    /// <returns></returns>
    public string CreateNewMacAddress()
    {
        //return "0016D3B5C493";
        int min = 0;
        int max = 16;
        Random ro = new Random();
        var sn = string.Format("{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}",
           ro.Next(min, max).ToString("x"),//0
           ro.Next(min, max).ToString("x"),//
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),//5
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),
           ro.Next(min, max).ToString("x"),//10
           ro.Next(min, max).ToString("x")
            ).ToUpper();
        return sn;
    }
    /// <summary>
    /// 得到Mac地址及注册表对应Index
    /// </summary>
    /// <param name="macAddress"></param>
    /// <returns></returns>
    public string GetAdapterIndex(out string macAddress)
    {
        ManagementClass oMClass = new ManagementClass("Win32_NetworkAdapterConfiguration");
        ManagementObjectCollection colMObj = oMClass.GetInstances();
        macAddress = string.Empty;
        int indexString = 1;
        foreach (ManagementObject objMO in colMObj)
        {
            indexString++;
            if (objMO["MacAddress"] != null && (bool)objMO["IPEnabled"] == true)
            {
                macAddress = objMO["MacAddress"].ToString().Replace(":", "");
                break;
            }
        }
        if (macAddress == string.Empty)
            return null;
        else
            return indexString.ToString().PadLeft(4, '0');
    }
    #region Temp
    public void noting()
    {
        //ManagementClass oMClass = new ManagementClass("Win32_NetworkAdapterConfiguration");
        ManagementClass oMClass = new ManagementClass("Win32_NetworkAdapter");
        ManagementObjectCollection colMObj = oMClass.GetInstances();
        foreach (ManagementObject objMO in colMObj)
        {
            if (objMO["MacAddress"] != null)
            {
                if (objMO["Name"] != null)
                {
                    //objMO.InvokeMethod("Reset", null);
                    objMO.InvokeMethod("Disable", null);//Vista only
                    objMO.InvokeMethod("Enable", null);//Vista only
                }
                //if ((bool)objMO["IPEnabled"] == true)
                //{
                //    //Console.WriteLine(objMO["MacAddress"].ToString());
                //    //objMO.SetPropertyValue("MacAddress", CreateNewMacAddress());
                //    //objMO["MacAddress"] = CreateNewMacAddress();
                //    //objMO.InvokeMethod("Disable", null);
                //    //objMO.InvokeMethod("Enable", null);
                //    //objMO.Path.ReleaseDHCPLease();
                //    var iObj = objMO.GetMethodParameters("EnableDHCP");
                //    var oObj = objMO.InvokeMethod("ReleaseDHCPLease", null, null);
                //    Thread.Sleep(100);
                //    objMO.InvokeMethod("RenewDHCPLease", null, null);
                //}
            }
        }
    }
    public void no()
    {
        Shell32.Folder networkConnectionsFolder = GetNetworkConnectionsFolder();
        if (networkConnectionsFolder == null)
        {
            Console.WriteLine("Network connections folder not found.");
            return;
        }
        Shell32.FolderItem2 networkConnection = GetNetworkConnection(networkConnectionsFolder, string.Empty);
        if (networkConnection == null)
        {
            Console.WriteLine("Network connection not found.");
            return;
        }
        Shell32.FolderItemVerb verb;
        try
        {
            IsNetworkConnectionEnabled(networkConnection, out verb);
            verb.DoIt();
            Thread.Sleep(1000);
            IsNetworkConnectionEnabled(networkConnection, out verb);
            verb.DoIt();
        }
        catch (ArgumentException ex)
        {
            Console.WriteLine(ex.Message);
        }
    }
    /// <summary>
    /// Gets the Network Connections folder in the control panel.
    /// </summary>
    /// <returns>The Folder for the Network Connections folder, or null if it was not found.</returns>
    static Shell32.Folder GetNetworkConnectionsFolder()
    {
        Shell32.Shell sh = new Shell32.Shell();
        Shell32.Folder controlPanel = sh.NameSpace(3); // Control panel
        Shell32.FolderItems items = controlPanel.Items();
        foreach (Shell32.FolderItem item in items)
        {
            if (item.Name == "网络连接")
                return (Shell32.Folder)item.GetFolder;
        }
        return null;
    }
    /// <summary>
    /// Gets the network connection with the specified name from the specified shell folder.
    /// </summary>
    /// <param name="networkConnectionsFolder">The Network Connections folder.</param>
    /// <param name="connectionName">The name of the network connection.</param>
    /// <returns>The FolderItem for the network connection, or null if it was not found.</returns>
    static Shell32.FolderItem2 GetNetworkConnection(Shell32.Folder networkConnectionsFolder, string connectionName)
    {
        Shell32.FolderItems items = networkConnectionsFolder.Items();
        foreach (Shell32.FolderItem2 item in items)
        {
            if (item.Name == "本地连接")
            {
                return item;
            }
        }
        return null;
    }
    /// <summary>
    /// Gets whether or not the network connection is enabled and the command to enable/disable it.
    /// </summary>
    /// <param name="networkConnection">The network connection to check.</param>
    /// <param name="enableDisableVerb">On return, receives the verb used to enable or disable the connection.</param>
    /// <returns>True if the connection is enabled, false if it is disabled.</returns>
    static bool IsNetworkConnectionEnabled(Shell32.FolderItem2 networkConnection, out Shell32.FolderItemVerb enableDisableVerb)
    {
        Shell32.FolderItemVerbs verbs = networkConnection.Verbs();
        foreach (Shell32.FolderItemVerb verb in verbs)
        {
            if (verb.Name == "启用(&A)")
            {
                enableDisableVerb = verb;
                return false;
            }
            else if (verb.Name == "停用(&B)")
            {
                enableDisableVerb = verb;
                return true;
            }
        }
        throw new ArgumentException("No enable or disable verb found.");
    }
    #endregion
}

oyljerry
oyljerry   Ds   Rxr 2015.07.16 19:25

自己构建raw socket的包,不过这个windows vista以后不允许发送了
你这个更像SendARP() 做的事情,进行ARP欺骗,获取对应的数据

xxxxx2
xxxxx2 可以留个QQ讨论一下
2 年多之前 回复
leizhang250
leizhang250   2015.07.16 17:15

1.MAC修改后很可能和其它MAC相同,这一点如何避免。
2.接收是会检查以太网封包包头中的MAC是不是自己的MAC,相同才会接收处理。

yy520a
yy520a 广域网内冲突的可能性非常的低,即便冲突也不会在同一个子网,所以不会影响双方通信,至于接收,肯定是要通信之前修改掉MAC,如果通信过程中更换掉MAC,肯定是接收不到返回的数据的!
2 年多之前 回复
xxxxx2
xxxxx2 那这样岂不是无法实现?
2 年多之前 回复
CSDNXIAON
CSDNXIAON   2015.07.16 17:19

如何修改本机MAC地址
----------------------同志你好,我是CSDN问答机器人小N,奉组织之命为你提供参考答案,编程尚未成功,同志仍需努力!

zuishikonghuan
zuishikonghuan   2015.07.16 23:41

Linux可以使用超级用户建立的raw socket(原始套接字)
Windows从xp的sp2版本就不允许应用程序使用链路层原始套接字了
再接收回来不太可能。hub环境下打开混杂模式就行,交换机环境么,你得先MAC欺骗,当然如果交换机静态绑定了MAC-PORT就不行了

xxxxx2
xxxxx2 大神可以留个QQ讨论一下吗
2 年多之前 回复
Csdn user default icon
上传中...
上传图片
插入图片