Change MAC address with Bettercap
As discussed in the previous article of installating bettercap, this framework can be used to perform many types of operation. Among them we have the possibility to change our mac address. You may probably ask yourself why would you want to change your mac adress ? Well, the answer is to provide more anonymity. For example ,This trick can be used to bypass authentification for the case of a wireless network that is MAC filtered. In this scenario we can scan the network to see the mac addresses of users connected on it and change our own with an authorized user MAC address. This is one among thousand ways to what you can with a fake generated MAC address.
Of course in this tutorial, we will not see any specific attack that can be perform after changing our MAC address, but we are going to see how we change it using bettercap.
So first of all, you have to know that a MAC address is a unique address assigned by manufacturers to Network Interface Controller (NIC) such as wifi card, ethernet card…
To check the mac address of our interface , we use the command ifconfig :
This command shows informations about our network cards. We can see that the mac address of my interface eth0 is 00:0c:29:4c:7a:3a.
Now let’s change it using bettercap! To launch bettercap => bettercap Once launched, we can check how to use it by typing => help mac.changer
We can see that the mac changer module is not running .
Before enable this module , we have to set the options first :
If you want to enter a particular mac address , you have to define in the option mac.changer.address as follows:
set mac.changer.address 00:11:22:33:44:55
Else , dont set it up. By default it will generate a random address.
The next option is : mac.changer.iface ; which consist of choosing the interface we want to spoof the mac changer. In my case, I want to spoof the mac address of my ethernet card identified by eth0.
set mac.changer.iface eth0
Now let’s launch the mac changer module => mac.changer on To verify that the mac address has been changed , we can use ifconfig again :
Warning:
In order to keep the generated MAC address for your interface, bettercap must run. This will allows you spoofing your mac address for a while until you close bettercap
To stop the mac changer module, and restore your original MAC address:
mac.changer off
Now we all know to change our mac address using bettercap.
Thanks for reading, if you struggle make sure to comment bellow and I will be glad to help.
Feel free to check the tutorials I have posted about bettercap tools. Have fun.