MAC Addresses for Carders Explained for Carding 2022-2023 - Are MAC Addresses Random?

[VictorBands98]

There are two (2) kinds: Randomized vs. Locally Administered Addresses

There is a bit which gets set in the OUI portion of a MAC address to signify a randomized vs. locally administered address.

The quick synopsis is look at the second character in a MAC address, if it is a 2, 6, A, or E it is a randomized address.

Wi-Fi Address 92:B1:B8:421:85 is a randomized address, because the second character is a 2.

The MAC Addresses are 48-bit in length, 24-bit for the OUI, and 24-bit for the Network Interface Controller.
___________________________________________________________

Pay attention to this part:

It determines your Operating System

Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS
Colon-Hexadecimal notation = MM:MM:MM:SS:SS:SS
Period-separated Hexadecimal notation = MMM.MMM.SSS.SSS

Windows uses Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS |||
For example: 00-14-22-04-25-37

MacOS uses Hyphen-Hexadecimal notation = MM-MM-MM-SS-SS-SS ||| For example: 00-14-22-04-25-37

Linux OS uses Colon-Hexadecimal notation

Cisco Systems uses Period-separated Hexadecimal notation.
___________________________________________________________

REMEMBER YOU DON'T WANT 2, 6, A or E as it signifies a randomized address.

REMEMBER YOU WANT A GLOBALLY UNIQUE MAC ADDRESS NOT A RANDOM LOCALLY ADMINISTERED ONE

___________________________________________________________

Browse the Browse MAC Address Database:

https--------www-----macvendorlookup-----com/browse

This tool will display the name of the company that manufactured a specific network device based on its MAC Address.

___________________________________________________________

MAC Address Lookup:

https://-----------api[dot]viewdns[dot]info/maclookup/

___________________________________________________________

What is an OUI MAC Address?

It's the part of the MAC Address that defines the hardware manufacturer.
It's the leftmost six digits (24 bits), also called prefixes, and is associated with the hardware manufacturer.


The OUI of some well-known manufacturers are as follow:

Dell: 00-14-22
Nortel: 00-04-DC
Cisco: 00-40-96
Belkin: 00-30-BD
Huawei: 00-9A-CD
Hewlett Packard: 3C-D9-2B
Google, Inc: 3C-5A-B4
Linksys (Cisco Systems): 00-13-10
Linksys (Cisco Systems): 00-25-9C
Linksys (Cisco Systems): 68-7F-74

-----You want your system to match-----not be random

Universal/Local and Individual/Group bits in MAC addresses

Universally administered Locally administered

x0‑xx‑xx‑xx‑xx‑xx x2‑xx‑xx‑xx‑xx‑xx
x4‑xx‑xx‑xx‑xx‑xx x6‑xx‑xx‑xx‑xx‑xx
x8‑xx‑xx‑xx‑xx‑xx xA‑xx‑xx‑xx‑xx‑xx
xC‑xx‑xx‑xx‑xx‑xx xE‑xx‑xx‑xx‑xx‑xx
Multicast (group) Locally administered
x1‑xx‑xx‑xx‑xx‑xx x3‑xx‑xx‑xx‑xx‑xx
x5‑xx‑xx‑xx‑xx‑xx x7‑xx‑xx‑xx‑xx‑xx
x9‑xx‑xx‑xx‑xx‑xx xB‑xx‑xx‑xx‑xx‑xx
xD‑xx‑xx‑xx‑xx‑xx xF‑xx‑xx‑xx‑xx‑xx


MAC Addresses

49:04:88:07:52:28
b1:5b:e8:6b:d0:da
6d:f2:00:ee:6d:c1
9e:9f:ac:26:cc:e5
2f:16:f8:7f:81:3c
d7:45:21:d3:59:1a
36:7e:be:32:05:8f
a3:61:9b:7f:ca:35
f2:f4:6a:31:64:97
30:1f:3e:a5:ab:b6
92:f6:e2:f5:e7:ba
82:33:9e:41:cc:4a
d2:b5:6a:bf:3c:6b
16:f9:78:b5:92:21
8a:e1:46:d5:4c:5c
9b:7f:dd:4e:65:07
c4:9b:7e:97:02:c3
29:3a:b8:aa:31:0c
47:d9:61:12:45:d6
a0:a7:31:cb:50:f1
7a:46:1d:1e:c6:06
b3:b1:78:2a:10:a7
cc:7a:87:cc:1b:10
e6:69:46:de:de:b9
95:57:26:fe:73:d4
be:26:dd:ae:b2:98
41:b5:7b:be:86:a1
f3:b6:8a:4e:52:bb
63:3c:de:4c:aa:f1
6d:9f:97:58:8c:2b
88:0a:e7:ee:3e:7b
9d:45:09:f2:97:1b
37:39:59:b6:23:6d
4a:e0:b6:60:ff:50
65:a5:9d:0b:3e:74
b2:db:96:83:2f:6b
2c:aa:1a:c3:d7:2f
ec:2a:64:8e:b9:18
68:0b:90:62:83:65
fa:11:ab:2d:c0:57
d2:a7:ec:88:11:02
9b:15:da:e3:4a:a4
01:b3:ff:bb:ba:1c
74:b7:f9:90:19:66
bb:ac:2e:2c:77:5a
f0:33:53:59:70:5b
1a:fb:7d:15:68:74
58:cc:01:29:bc:34
c7:5a:28:fb:62:e2
b2:be:6a:5d:e9:01
d6:30:66:44:41:6a
33:45:22:f0:33:cf
d8:e8:e1:fa:85:42
e9:47:42:de:c8:c0
d6:c2:91:6c:61:f3
28:61:08:3f:44:4d
c6:80:05:17:82:88
05:ef:28:2e:f1:b4
35:44:75:24:28:f2
61:6a:33:31:99:a1
b2:95:a2:33:0a:1e
32:98:17:25:a7:c1
e2:bb:f0:dc:cd:48
3c:7e:92:af:87:87
40:59:70:37:38:ad
b7:3a:6b:a4:87:2a
97:ca:3e:84:5b:9d
48:36:0f:38:07:2e
fe:4a:20:43:87:df
f7:f5:0f:b7:4a:f8
49:ef:4a:6b:6a:34
93:d4:9f:52:29:f2
6f:d6:ff:35:74:66
93:fd:0f:08:89:f0
88:53:bc:00:43:04
31:10:e3:ff:9f:a0
5f:a8:41:fe:b2:6f
1f:3f:ed:0f:d3:6e
09:c6:b3:5a:51:67
9f:61:e5:0a:a0:bf
de:e3:19:cd:cf:bc
f1:60:50:ed:5a:85
36:0d:e8:b1:c5:7d
f1:18:49:a5:ac:0e
1d:db:ea:06:ad:43
18:38:2e:a1:a2:9a
c4:f0:2e:a3:9c:f9
00:21:71:61:f6:44
10:bc:2b:b1:41:fd
e7:6b:b0:fc:40:2d
cb:4a:36:8f:68:fd
b4:b7:58:cf:e3:bb
ad:5a:54:8f:1c:b4
49:bc:f9:bf:db:f1
7f:0d:e3:bc:c6:81
df:a8:a9:d5:93:dc
59:39:b8:7c:91:32
f8:5c:d1:a2:54:d4
0a:b0:b2:ae:0f:a6
8b:83:ab:77:d9:be
00:ff:84:f1:5c:e3
bc:1a:88:cb:a9:7d
a4:92:3b:01:08:fb
f8:3b:b2:7b:13:3a
ce:ae:2c:a9:9f:cd
fd:c6:fc:b3:52:89
96:c6:d0:fe:a9:5f
03:91:48:37:bc:ef
85:fe:df:50:52:ff
e6:b4:a8:a5:07:fe
93:56:47:95:c5:3f
2c:7c:85:4d:10:43
86:1f:bd:b5:ca:27
83:2e:b6:54:ae:8c
c7:8e:0f:63:2c:b8
b4:3b:99:32:2b:82
af:65:4a:a4:35:15
7b:d3:40:4b:bf:5b
36:86:4b:06:1c:07
2b:3d:ae:62:c0:02
b4:6d:6e:07:26:de
45:b7:2c:3e:47:e7
70:5b:4c:e6:ec:47
49:c4:ee:17:75:ca
9f:d1:1b:6c:36:7f
59:be:e1:b9:8f:bc
8a:69:5f:6b:3b:6b
11:ef:44:00:94:2e
7b:61:25:8c:9a:b3
0c:e2:b3:4c:6c:53
66:f1:6a:e6:3e:63
28:77:1f:46:51:55
1b:cd:9e:78:5a:0a
51:ac:11:11:e8:8e
fe:75:b3:c8:bd:6c
1f:51:40:d8:5e:ec
91:52:2f:d9:3f:67
58:9a:ba:ea:01:fe
d9:a8:d8:40:28:36
40:2a:51:f9:9d:9d
a0:78:07:c7:1e:3c
9a:1f:ad:05:f7:08
44:d3:f0:2d:8d:78
01:0a:52:49:8e:b7
19:77:f7:90:94:d0
e2:86:73:ea:bd:3e
a5:94:83:13:19:96
54:3d:94:73:6e:c6
db:d2:97:4d:5e:84
48:eb:61:1e:3c:db
1b:67:18:8e:28:9a
03:bd:2f:02:6a:c1
7e:1a:c0:da:e1:7f
7f:4d:ed:18:2e:0b
42:43:68:81:11:a0
d1:42:bc:f3:76:ea
bc:de:87:96:7c:a6
ab:2b:6d:21:c5:5d
26:31:db:4b:e5:b8
84:bd:03:d5:f5:03
4a:c3:ba:26:66:0f
fa:23:9d:44:fa:34
fc:b1:22:2b:e0:ac
11:b5:8f:83:95:72
08:55:de:2a:18:e6
48:7b:7f:dc:3f:f4
e1:da:f2:32:02:96
a2:4d:df:c9:63:cf
64:32:21:79:5f:ed
59:e1:03:c1:ea:6b
c6:36:cf:73:09:a4
13:00:33:fc:51:5b
28:64:96:cb:01:86
ec:ed:1e:ff:92:71
36:09:3c:b7:b2:db
da:10:9e:87:60:71
6c:b3:e3:31:65:24
4d:8e:7b:82:38:a3
08:f7:a2:b1:e8:b6
3d:8d:d4:99:86:ef
dc:14:49:c9:ca:86
fd:4b:54:74:40:14
6e:2e:61:48:7c:39
27:d0:11:e8:7a:9e
20:c3:2f:6d:06:3f
2b:ed:15:b1:94:8e
6f:b5:e6:f3:01:96
a1:7c:51:fb:eb:e0
c7:aa:20:fe:4a:e3
a4:3b:7d:5e:fb:05
ff:52:fd:0c:d0:76
a6:8c:89:c2:fe:40
20:30:53:99:28:4d
38:85:29:d9:0b:6c
2d:58:57:42:ba:ec
bb:29:8d:4e:89:89
44:cd:05:fc:59:14
e7:95:bb:36:db:bb
7e:59:c2:06:dc:29
e6:21:90:ff:cb:07
63:02:34:96:a5:9a
35:b4:ea:ae:03:ea
ed:0e:b5:81:42:05
70:bb:a0:66:24:eb
42:30:3e:88:81:19
b7:93:23:24:81:7e
af:4b:59:87:2f:ad
69:c2:7a:7b:6f:36
53:49:ec:1c:fa:76
d9:af:28:94:42:d9
b0:d2:a5:89:87:42
ca:6f:a5:c4:e5:26
11:b8:83:e9:dc:89
5a:c2:ad:05:32:df
c8:15:4a:4d:1f:5f
c1:70:bc:e4:63:d4
b0:cb:b5:fe:13:f8
be:a1:40:28:07:fa
26:1d:35:be:a4:7e
72:a5:6d:84:90:1a
ef:1a:74:64:9f:05
15:3f:f4:17:9e:d4
3d:46:57:83:da:b5
03:b2:69:53:ef:ae
5d:ec:ba:f3:40:b1
bd:64:5f:51:84:ac
e8:4a:02:88:69:46
a5:15:87:99:91:81
f5:b4:25:6d:66:ad
d2:e3:78:49:28:e2
a6:c7:f1:f5:ac:95
8c:e7:49:bb:68:cc
d5:4e:67:4d:1a:e2
96:d4:23:14:99:55
91:77:5d:54:ce:3e
cc:94:d2:b3:55:d5
20:bd:d5:8b:1a:f3
05:64:48:7e:37:61
13:31:7d:6a:c9:2c
53:60:49:c3:d5:9e
1f:05:5b:51:e8:fb

 

[StormOneOnly]

I really hope you noobs know more about networking than this. MAC addresses are fucking layer 2. That means the source MAC in your packet will be changed as soon as it leaves your router/gateway, the source MAC will then be your routers until it hits the next hop, probably an ISP router, and guess what the SRC MAC becomes that router's MAC and so on. Run wireshark for 2 seconds and you will see the destination mac will always be the mac of your router, NOT the site you just visited. The SRC and DST MAC will change on each hop, you are wasting your time with all of this BS. The only time it would matter if you spoofed your MAC is if the goddamn store you are carding is sitting on your LAN.

 

[VictorBands98]

I really hope you noobs know more about networking than this. MAC addresses are fucking layer 2. That means the source MAC in your packet will be changed as soon as it leaves your router/gateway, the source MAC will then be your routers until it hits the next hop, probably an ISP router, and guess what the SRC MAC becomes that router's MAC and so on. Run wireshark for 2 seconds and you will see the destination mac will always be the mac of your router, NOT the site you just visited. The SRC and DST MAC will change on each hop, you are wasting your time with all of this BS. The only time it would matter if you spoofed your MAC is if the goddamn store you are carding is sitting on your LAN.

I think that that's there only concern: connecting to a public WiFi. I'm pretty sure I've gone over, many times, that MAC addresses stay at layer 2 and at their height are used in ARPing. They're just doing their thing.

 

[NBAYoungCarder]

i have no interest in carding but this is a g o l d e n source of opsec info. thanks a lot victor bands

 

[VictorBands98]

i have no interest in carding but this is a g o l d e n source of opsec info. thanks a lot victor bands

You're an ace. May the good stuff keep coming. Enjoy your weekend.

 

[NBAYoungCarder]

I have two questions about changing the mac address. they might seem stupid sorry am a beginner. I use the Tmac program to change the mac address and select wifi, is that ok? My second question would be do I have to change the mac address of the vm or my pc. I agree with mine pc but am not sure

 

[VictorBands98]

I have two questions about changing the mac address. they might seem stupid sorry am a beginner. I use the Tmac program to change the mac address and select wifi, is that ok? My second question would be do I have to change the mac address of the vm or my pc. I agree with mine pc but am not sure

You can change both. Theoretically, you change your PC's MAC address because your router/switch ARPs your PC by looking up its MAC address to forward frames to.
Do both just to be safe depending on whether you are using a bridged or NAT schematic.
You can use Tmac -- the goal of the post was to get to the precision of a non-random MAC address; not artificially produced by human input, to make it look factory-made.

 

[NBAYoungCarder]

You can change both. Theoretically, you change your PC's MAC address because your router/switch ARPs your PC by looking up its MAC address to forward frames to.
Do both just to be safe depending on whether you are using a bridged or NAT schematic.
You can use Tmac -- the goal of the post was to get to the precision of a non-random MAC address; not artificially produced by human input, to make it look factory-made.

Thank you very much , but i have a last question is that correctly to change the mac adress at tmac with Network connections wifi?

 

[VictorBands98]

Thank you very much , but i have a last question is that correctly to change the mac adress at tmac with Network connections wifi?

It doesn't matter if it's WiFi, Ethernet, USB--you are changing the MAC address associated with a network interface.

 

[StormOneOnly]

Seriously underrated post, will help a lot of newbies.

 

[VictorBands98]

Seriously underrated post, will help a lot of newbies.

Thank you. Hope it does. The closer you get to the real OEM machine, the less of an anomaly you are.

 

[NBAYoungCarder]

Thank you. Hope it does. The closer you get to the real OEM machine, the less of an anomaly you are.

Appreciate this my friendly Janitorial brother, as one of those newbies, this is something that isn't parroted again and again and again but actually has great significance. It's been added to my overwhelming stack of resources!

 

[VictorBands98]

Appreciate this my friendly Janitorial brother, as one of those newbies, this is something that isn't parroted again and again and again but actually has great significance. It's been added to my overwhelming stack of resources!

Sweet, I really hope it works out for you. Best of luck and enjoy!

 

[StormOneOnly]

In essence, the ones below are actually the localize ones(Recommended)? Just asking
b1:5b:e8:6b:d0:da
6d:f2:00:ee:6d:c1
9e:9f:ac:26:cc:e5
2f:16:f8:7f:81:3c
d7:45:21:d3:59:1a
36:7e:be:32:05:8f
a3:61:9b:7f:ca:35
f2:f4:6a:31:64:97
30:1f:3e:a5:ab:b6
92:f6:e2:f5:e7:ba
82:33:9e:41:cc:4a
d2:b5:6a:bf:3c:6b
16:f9:78:b5:92:21
8a:e1:46:d5:4c:5c
9b:7f:dd:4e:65:07
c4:9b:7e:97:02:c3
29:3a:b8:aa:31:0c
47:d9:61:12:45:d6
a0:a7:31:cb:50:f1
7a:46:1d:1e:c6:06
b3:b1:78:2a:10:a7
cc:7a:87:cc:1b:10
e6:69:46:de:de:b9
95:57:26:fe:73:d4
be:26:dd:ae:b2:98
41:b5:7b:be:86:a1
f3:b6:8a:4e:52:bb
63:3c:de:4c:aa:f1
6d:9f:97:58:8c:2b
88:0a:e7:ee:3e:7b
9d:45:09:f2:97:1b
37:39:59:b6:23:6d
4a:e0:b6:60:ff:50
65:a5:9d:0b:3e:74
b2:db:96:83:2f:6b
2c:aa:1a:c3:d7:2f

 

[VictorBands98]

In essence, the ones below are actually the localize ones(Recommended)? Just asking
b1:5b:e8:6b:d0:da
6d:f2:00:ee:6d:c1
9e:9f:ac:26:cc:e5
2f:16:f8:7f:81:3c
d7:45:21:d3:59:1a
36:7e:be:32:05:8f
a3:61:9b:7f:ca:35
f2:f4:6a:31:64:97
30:1f:3e:a5:ab:b6
92:f6:e2:f5:e7:ba
82:33:9e:41:cc:4a
d2:b5:6a:bf:3c:6b
16:f9:78:b5:92:21
8a:e1:46:d5:4c:5c
9b:7f:dd:4e:65:07
c4:9b:7e:97:02:c3
29:3a:b8:aa:31:0c
47:d9:61:12:45:d6
a0:a7:31:cb:50:f1
7a:46:1d:1e:c6:06
b3:b1:78:2a:10:a7
cc:7a:87:cc:1b:10
e6:69:46:de:de:b9
95:57:26:fe:73:d4
be:26:dd:ae:b2:98
41:b5:7b:be:86:a1
f3:b6:8a:4e:52:bb
63:3c:de:4c:aa:f1
6d:9f:97:58:8c:2b
88:0a:e7:ee:3e:7b
9d:45:09:f2:97:1b
37:39:59:b6:23:6d
4a:e0:b6:60:ff:50
65:a5:9d:0b:3e:74
b2:db:96:83:2f:6b
2c:aa:1a:c3:d7:2f

Basically the goal was not to just make random MAC addresses but quasi-clone what would be real MAC address as every manufacturer is designated it's own "Organizationally Unique Identifier".
8C:1F:64:8F:4 MA-S Loadrite (Auckland) Limited NZ
A4:51:5E MA-L Juniper Networks US
D4:AD:20 MA-L Jinan USR IOT Technology Limited CN
88:9C:AD MA-L Cisco Systems, Inc US
D8:83:32 MA-L TaiXin Semiconductor Co., Ltd CN
1C:FC:17 MA-L Cisco Systems, Inc US
BC:5E:33 MA-L Hangzhou Hikvision Digital Technology Co.,Ltd. CN
00:5C:C2 MA-L SHENZHEN MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD. CN
34:1B:2D MA-L Cisco Systems, Inc US
78:F1:C6 MA-L Cisco Systems, Inc

 

[NBAYoungCarder]

Basically the goal was not to just make random MAC addresses but quasi-clone what would be real MAC address as every manufacturer is designated it's own "Organizationally Unique Identifier".
8C:1F:64:8F:4 MA-S Loadrite (Auckland) Limited NZ
A4:51:5E MA-L Juniper Networks US
D4:AD:20 MA-L Jinan USR IOT Technology Limited CN
88:9C:AD MA-L Cisco Systems, Inc US
D8:83:32 MA-L TaiXin Semiconductor Co., Ltd CN
1C:FC:17 MA-L Cisco Systems, Inc US
BC:5E:33 MA-L Hangzhou Hikvision Digital Technology Co.,Ltd. CN
00:5C:C2 MA-L SHENZHEN MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD. CN
34:1B:2D MA-L Cisco Systems, Inc US
78:F1:C6 MA-L Cisco Systems, Inc

i wonder was this my problem when i use random my mac address and i wasnt able to access internet connection my broswer was slow and not connecting
so if i use one of your mac address you recommended will it fix my problem?

 

[VictorBands98]

i wonder was this my problem when i use random my mac address and i wasnt able to access internet connection my broswer was slow and not connecting
so if i use one of your mac address you recommended will it fix my problem?

Perhaps, by trying to get as close to the real authentic thing as possible it won't raise a flag.

 

[NBAYoungCarder]

When i try to change my mac adress with tmac . Its not working ,there is the Pop up and say its need to beginn with 02. What can i do ?

 

[StormOneOnly]

Another question of mine. when I changed my dns to OPENIC, since then I feel my internet is very slow while browsing vpn ==> Tor. The internet is fine on Just vpn but not at tor, should i change my dns to google ? I don't want to switch back to my ISP Default

2. Which can is considered as real OPSEC

A. Burner ==> VM ==> Carding
B. Burner ==> VM ==> RDP ==> Carding

I personally believe A should be good as in B option we are disclosing our VPN IP to the RDP, where as the proxy would be the end point in the VM

Whats you're view?

 

[VictorBands98]

Another question of mine. when I changed my dns to OPENIC, since then I feel my internet is very slow while browsing vpn ==> Tor. The internet is fine on Just vpn but not at tor, should i change my dns to google ? I don't want to switch back to my ISP Default

2. Which can is considered as real OPSEC

A. Burner ==> VM ==> Carding
B. Burner ==> VM ==> RDP ==> Carding

I personally believe A should be good as in B option we are disclosing our VPN IP to the RDP, where as the proxy would be the end point in the VM

Whats you're view?

Google is common-stalk. Good way to fit in.