How to not get your NIC MAC blackisted... - Page 3 - Techwatch Support Forums: Digital & Satellite TV, FTA, Cable, Computers, Mobile Phones, Apple and General Tech Forums

cockneysean · 19-04-09, 11:05 PM

No not in THEIR telnet logs.

But there will be something in the CMTS logs, as thats where it is all happening.

Bruteforce basically takes a working MAC, then changed some digits, and transmits them to the CMTS in the same way that your modem registers.

When the CMTS hears your "bruteforce" it replies with a DHCP offer as though it were speaking to a modem. That's how it works, the actual customers modems are irrelevent in this matter as they don't even have to be turned on for the bruteforce, I believe.

G77 · 19-04-09, 11:22 PM

gotcha. so basically, if they could be bothered, bruteforcing would be like waving a big flag saying im here

cockneysean · 20-04-09, 12:10 AM

Yeh. Hence why it should be used sparingly.

fitz · 20-04-09, 12:37 AM

Quote:

Originally Posted by G77

gotcha. so basically, if they could be bothered, bruteforcing would be like waving a big flag saying im here

More like "someone is performing a brute force dhcp req based around this MAC address". If the subbed owner of the sniffed MACs you did this with before didn't get a knock on the door, why would you get one using your own MAC? Could have come from anyone.

cheers, fitz

cockneysean · 20-04-09, 12:48 AM

Not necessarily getting a door knock or it because it can be done by anyone, it's not going to flag you personally, but as fitz says, they do see it.

You are injecting packets into their network after all.

If you really want to get deep in to it, DL a copy of BackTrack Live Linux CD and play with some of the network sniffing tools on there. You will be absolutely amazed. DHCP Sniffer is basically a sniffing tool that filters out the information useful to the cause, and displays it to you. Have a go of Ethereal or WireShark and you can see everything travelling along a network segment. Very interesting stuff.

TL;DR: They can do everything we can.

stokie mac · 24-04-09, 10:13 PM

I will give this a try fellas..

19-04-09, 11:05 PM	#21 (permalink)
cockneysean Technology Forums Join Date: Nov 2008 Posts: 1,331 Thanks: 78 Thanked 332 Times in 183 Posts	Re: How to not get your NIC MAC blackisted... No not in THEIR telnet logs. But there will be something in the CMTS logs, as thats where it is all happening. Bruteforce basically takes a working MAC, then changed some digits, and transmits them to the CMTS in the same way that your modem registers. When the CMTS hears your "bruteforce" it replies with a DHCP offer as though it were speaking to a modem. That's how it works, the actual customers modems are irrelevent in this matter as they don't even have to be turned on for the bruteforce, I believe.

19-04-09, 11:22 PM	#22 (permalink)
G77 Super Moderator Join Date: May 2008 Posts: 6,118 Thanks: 695 Thanked 1,250 Times in 1,044 Posts	Re: How to not get your NIC MAC blackisted... gotcha. so basically, if they could be bothered, bruteforcing would be like waving a big flag saying im here __________________ 1M Motorised Dish, 45W-36E, DM800HD. Quad LNB Mesh Mini Dish, 28.2E, DM500, TM500. Samsung Galaxy S GT-I9000 XXJVU & CF-Root.

20-04-09, 12:10 AM	#23 (permalink)
cockneysean Technology Forums Join Date: Nov 2008 Posts: 1,331 Thanks: 78 Thanked 332 Times in 183 Posts	Re: How to not get your NIC MAC blackisted... Yeh. Hence why it should be used sparingly.

20-04-09, 12:48 AM	#25 (permalink)
cockneysean Technology Forums Join Date: Nov 2008 Posts: 1,331 Thanks: 78 Thanked 332 Times in 183 Posts	Re: How to not get your NIC MAC blackisted... Not necessarily getting a door knock or it because it can be done by anyone, it's not going to flag you personally, but as fitz says, they do see it. You are injecting packets into their network after all. If you really want to get deep in to it, DL a copy of BackTrack Live Linux CD and play with some of the network sniffing tools on there. You will be absolutely amazed. DHCP Sniffer is basically a sniffing tool that filters out the information useful to the cause, and displays it to you. Have a go of Ethereal or WireShark and you can see everything travelling along a network segment. Very interesting stuff. TL;DR: They can do everything we can.

24-04-09, 10:13 PM	#26 (permalink)
stokie mac Senior Member Join Date: Jul 2008 Location: Stoke-On-Trent.. Posts: 254 Thanks: 197 Thanked 17 Times in 16 Posts	Re: How to not get your NIC MAC blackisted... I will give this a try fellas.. __________________ Be LOYAL.. Be PROUD.. Be STOKE!!..

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Nic mac banning becoming rapid!	benyboybob	Cable Modems	14	12-04-09 10:02 PM
Questions about Changing Nic Mac	adam1	Cable Modems	5	12-04-09 01:26 AM
V.M Keep banning my Nic Mac within 10sec?	dee_jay	Cable Modems	11	10-04-09 03:19 PM
router works but can't sync own mac in ambit 250 haxorware	mrbubbly	Cable Modems	1	04-03-09 11:28 PM
change your nic mac address	nufc126	Cable Modems	5	04-02-09 12:34 AM