Is there a MAC address modifier that can be used in Internet cafes?

It depends on whether your machine has an integrated NIC or a standalone NIC

Needless to say, the independent network card can be replaced.

Right-click on the network neighbor icon on the desktop, select "Properties", and there are generally two icons in the pop-up "Network and Dial-up Connection" window, one is the "New Connection" icon, and the other is the "My Connection" icon. Of course, if you have two network cards on your machine, there will be three icons. Now let's say you only have one network card, then right-click on the "My Connections" icon and select "Properties", and a "My Connection Properties" window will pop up.

There is a "configuration" button at the bottom of the window, click the button and enter the properties dialog box of the network card, there are five property pages in this dialog box, click on the second item "Advanced" page, there are two or more under the "Properties" logo, now you should be able to see a property item called "network address", click on the item, there are two single options under the "value" logo on the right side of the dialog box, the default is "non-existent", now you only need to select the above single option, Then enter the MAC address of the network card you want to change in the box on the right (note to enter continuously, do not bring " such as " 00e0404000a0 ", click "OK", and you're done.)

Here's how XP works. Don't know what system you're using.

How can I quickly detect and locate the ARP virus in the LAN? Faced with hundreds of computers in a local area network, it is obviously not a good idea to detect them one by one. In fact, we just need to use the basic principle of the ARP virus:

Send a fake ARP spoofing broadcast to quickly lock the poisoned computer by disguising it as a gateway. It is conceivable to use the program to achieve the following functions: when the network is normal, keep the IP address and MAC address of the correct gateway firmly in mind, and monitor the ARP packets from the whole network in real time, when it is found that there is an ARP packet broadcast, its IP address is the IP address of the correct gateway, but its MAC address is the MAC address of other computers, at this time, it is undoubtedly ARP spoofing.

This suspicious MAC address alarm, according to the network when the IP MAC address comparison table query the computer, locate its IP address, so that the poisoned computer is located. Let's take a closer look at how to use the command line to detect ARP poisoning on your computer. Command line method This method is relatively simple, without using third-party tools, using the system's own arp commands.

When ARP spoofing occurs in the local area network, the ARP virus computer will send ARP spoofing broadcasts to the whole network non-stop, and then other computers in the LAN will dynamically update their own ARP cache table, and record the MAC address of the gateway as the MAC address of the ARP virus computer. It needs to be entered at the cmd command prompt. The returned information after entering is as follows: Internet address physical address type 00-50-56-e6-49-56 dynamic At this time, because the arp table of this computer is an error record, therefore, the MAC address is not the MAC address of the real gateway, but the MAC address of the poisoned computer!

At this time, according to the IP-MAC address comparison table of the whole network when the network is normal, you can find the IP address of the poisoned computer. It can be seen that when the network is normal, it is very important to save an IP-MAC address comparison table of computers on the whole network. You can use the NBTSCAN tool to scan the IP address and MAC address of the entire network segment and save it for later use.