KLC Consulting, Inc.
Information Security Services

Readme / Release Notes


KLC Home

About KLC



Security Resources

Trojan Analysis

For Windows MAC Address Modifier with user friendly Windows GUI, please use SMAC.

SMAC-CL - MAC Address Modifying Utility (Command Line Edition) for Windows 2000, XP, and 2003 systems.

By KLC Consulting (KLC) Security Team,
Kyle Lai, Senior Security Consultant,
Bob Bourret, Senior Software Developer



SMAC-CL Official Website is at http://www.klcconsulting.net/smac-cl.  

SMAC-CL users must comply to the End-User-License Agreement (EULA.)  Click here to view EULA.


Table of Contents:


Description:    (back to Top)

SMAC-CL is a sister tool of the original SMAC.   SMAC-CL is a command line version of SMAC, the MAC Address Spoofer for Windows 2000, XP, and 2003. SMAC-CL is designed for users who prefer command line tools, and professionals who need to automate MAC address spoofing via scripts.

SMAC-CL is a powerful, yet an easy-to-use and intuitive command-line MAC Address Modifying Utility.  SMAC-CL allows users to change MAC address for any Network Interface Cards (NIC) on the Windows 2000, XP, and 2003 Server systems, regardless of whether the manufacturers allow this option or not.

SMAC-CL does not change the hardware burned-in MAC addresses.  It is not necessary.  SMAC-CL changes the "software based" MAC addresses on the Windows 2000, XP, and 2003 Server systems, and the new MAC addresses you change will sustain from reboots.

SMAC-CL is created by Certified Information Systems Security Professionals (CISSP), Certified Information Systems Auditors (CISA), Microsoft Certified Systems Engineers (MCSE), and professional software engineers.  With combined efforts, SMAC-CL is well designed to be an user-friendly tool for both the technical and non-technical users.

For users who wish to use Windows version of MAC Address Modifier, which comes with easy and user friendly Windows Graphical User Interface (GUI,) might want to look into our SMAC tool.

Please submit bug reports and your wish list to us (support@klcconsulting.net).


Features:    (back to Top)

SMAC-CL is capable of:

  • Update MAC addresses by NIC's IP

  • Update MAC addresses by NIC's Device ID

  • Remove Spoofed MAC addresses by NIC's IP

  • Remove Spoofed MAC addresses by NIC's Device ID

  • Display NICs' network info

  • Create report of NICs' with user defined format)

  • Display NICs' device ID's

  • Display NICs' config ID's

    SMAC-CL provides capabilities to display the most common and useful features and information of network adapters. Therefore, SMAC-CL can be easily scripted and integrated with Microsoft's DEVCON utility, to fully automate SMAC-CL, and re-activate network adapters.

    SMAC-CL website: http://www.klcconsulting.net/smac-cl 

Installation:    (back to Top)

Because SMAC-CL is a command-line tool, it does not require a typical Windows installation process.

SMAC-CL software is delivered via a ZIP file.  You first need to unzip the SMAC-CL zip file and put the unzipped files into a local folder .

SMAC-CL zip file consists of 4 files:

  • SMACCL.exe

  • SMAC-CL License Agreement.txt

  • SMAC-CL HelpFile

  • SMAC-CL Readme


System Requirements:    (back to Top)

  • SMAC-CL Works on Windows 2000, XP, 2003

  • SMAC-CL works on Network Interface Cards (NIC) that are on the Microsoft Hardware Compatibility List (HCL).  Usually you will see a "Designed for Windows 2000" or "Designed for Windows XP" logo on the box of the NIC.  If your NIC is not on the HCL, please contact your NIC manufacturer to check for compatibility.


Usage Guide:    (back to Top)

SMAC-CL has a very detailed built-in help file, which describes every available parameters, which could be very useful in scripting.  In order to view this help file, you can click here; or you can simplify start a command-line window and type "smaccl.exe"


Activate New MAC Addresses:    (back to Top)

There are 3 ways to make the newly changed MAC addresses active.  Method I does not require a system reboot.:

            I.     De-activate and Re-activate the network adapter by using DEVCON (by Microsoft.) To de-activate a network adapter, type "devcon disable [hardware id]".   To activate a network adapter, type "devcon enable [hardware id]".  Hardware ID for a network adapter can be obtained by using "-hid" switch in SMAC-CL.  Please refer to the SMAC-CL help file for more details.  This could be extremely handy for users who need an automated solution for modifying MAC addresses.  

            II.     Go to Start->Setting->Control Panel, and double click on "Network Neighborhood". 

WARNING: Make sure you understand that you WILL lose the network connection after completing step "2." below.  If you are a DHCP client, you might get a new IP address after completing step "3."

1.     Select the Network Adaptor for which you want the MAC address changed.

2.     Right click on the selected Network Adaptor and click "Disable."  Verify that the status column for this adaptor has changed to "Disabled"

3.     Right click on the selected Network Adaptor and click "Enable."  Verify that the status column for this adaptor has changed to "Enabled"

4.     If for any reason the network adapter cannot be disabled or re-enabled, you will have to reboot your system to make the changes effective.

          III.     Reboot your computer.  

True Hardware Burned-in MAC Address:    (back to Top)

In order to get the True Hardware MAC address, you must remove the spoofed MAC entry.  Here are the steps:

You can just use the "-rid" or "-rip" switch to remove spoofed MAC addresses.



  1. Make sure you DO NOT assign one MAC address to multiple NIC's on a Local Area Network (LAN).  Doing so may cause network problems.  MAKE SURE YOU HAVE ONE UNIQUE MAC ADDRESS PER NIC!!!

  2. You must assign MAC addresses according to the IANA Ethernet-number assignment database.

  3. Make sure you DO NOT use Multicast MAC addresses.  You can check out the Multicast MAC addresses at http://www.iana.org/assignments/ethernet-numbers.

  4. "00-00-00-00-00-00" is NOT a valid MAC address.  Even though you spoofed your MAC address to "00-00-00-00-00-00," your network adapter will reject this MAC address, and your TRUE MAC address will remain.  Otherwise, your network adapter may not function.   

  5. In order to activate the new MAC address, you may need to disable then re-enable the network adapter, or reboot your system.


How to contact KLC Consulting, Inc. (KLC):    (back to Top)

KLC Consulting, Inc.
P.O. Box 395
Holden, MA 01520

For more information about KLC and our services, please visit KLC website at http://www.klcconsulting.net or send us an email to info@klcconsulting.net

For support questions, please send emails to support@klcconsulting.net



Copyright 2002-2011 KLC CONSULTING, INC.