How do I break the "Cyber Trooper"? It may be useful to read the following text carefully.
ADSL **** enjoy the Internet there are two ways, one is the proxy, one is the address translation (NAT), we often say that the routing method is in fact the NAT method, in fact, the principle of routing and NAT is still different, this is not to discuss, the current ADSL cat generally have NAT function, with its own function to achieve **** enjoy the Internet is more than economical and convenient, the main purpose of this article is to discuss this way. The main discussion is about this approach.
To block more than one computer from accessing the Internet, you must be able to find out if there are more than one machine behind the *** enjoyment, and the working principle of NAT is shown in Figure 1, which is converted into 192.168.0.1 after NAT to access the outside of the Internet, and the MAC address is converted into the MAC address of the ADSL. That is to say, in principle, directly in the ADSL exit to catch the NAT-converted packets can not be found in the end there are several machines on the Internet. How do you find out? After researching it is found that it is the use of a variety of methods to detect whether the user with **** enjoy the way online, so as to limit the following respectively crack:
Figure I, NAT's principle of operation
a. Check the same IP address in the packet
a. Check whether there are different MAC addresses in the packets of the same IP address, if so, it is determined that the user **** enjoys the Internet. The way to break it is to change the MAC address of each machine to the same.
First of all, you need to get the MAC of the machine: The MAC address is the physical address solidified in the serial EEPROM on the NIC, which is usually 48 bits long. The Ethernet switch realizes packet exchange and delivery based on the MAC source address and MAC destination address in the header of a particular message packet.
(1) In Windows 98/Me, click "Start" → "Run" → type "winipcfg" → Enter.
(2) in Windows 2000/XP, click "Start" → "Run" → enter "CMD" → enter → enter "ipconfig /all"→Enter.
Or right-click on the local connection icon, select Status, and then click on the Support tab, where "Details" contains the MAC and other important network parameters.
1.
If your NIC driver has a direct function to clone the MAC address, such as RealTek's RTL8139 chip, then congratulations, click Start → Settings → Control Panel, double-click Network and Dial-up Connections. ", right-click on the need to modify the MAC address of the network card icon, and select "Properties". In the "General" tab, click the "Configuration" button, click the "Advanced" tab. In the Properties area, you should see an item called
"Network Address" or "Locally Administered
". Address", click on it and on the right hand side, under "Value", enter the value of the MAC address you want to specify. Enter 12 consecutive numbers or letters, without the "-" in between. After restarting the system, the settings will take effect (Windows
98 and Windows 2000/XP users operate slightly differently, please refer to the system instructions for operation)
2. If your NIC driver does not provide the function of cloning the MAC address, then the following are provided to provide a number of ways to hopefully find a suitable for you
WIN98:
a. In the "Network Neighborhood" icon, right-click, select "Properties", out of a "Network" dialog box, in the "Configuration" box, double-click on the NIC you want to modify, out of a NIC Properties dialog box. In the "Advanced" option, also click the "Properties" logo under the "Network
Address" item, in the right two single option to select the above one, and then in the box to modify the MAC address of the network card, click "OK", the system will prompt you to reboot. After restarting, your NIC address will be modified successfully!
b. Click "Start → Run", type "winipcfg", select the NIC you want to modify, and record the MAC address value. Click "Start ?ú Run", type "regedit" to run the registry editor (before modifying the registry, be sure to back up the registry), based on the registry tree structure, in turn, find "HKEY_LOCAL_MACHINE". LOCAL_MACHINE\System\CurrentControlSet\Services\Class\Net", you will see similar to "0000", "0001 You will see subkeys like "0000", "0001", "0002" and so on. Starting with the "0000" subkey, look for the contents of the "DriverDesc"
key under that subkey until you find the exact same NIC registry information that we are looking for.
Once you have found the correct card, click the drop-down menu "Edit→New→String", name the string "networkaddress", and in the newly created "networkaddress", click "Edit". Double-click on the newly created "networkaddress" string name to enter the value. Enter the new MAC address you specified. The new MAC address should be a 12-digit number or letter with no "-" in between, something like "00C095ECB761".
There are two ways to activate the new MAC address:
If you are using a regular internal NIC, you will have to reboot your computer for the changes to take effect.
If you are using a PCMCIA card, you can follow these steps without having to reboot the operating system: Run winipcfg, select and release the DHCP settings, close winipcfg. Open the Control Panel or the system tray "PC
Card
( PCMCIA)" to stop and eject the PCMCIA card. Re-insert the PCMCIA card, open winipcfg, select and refresh the DHCP settings, run winipcfg, and make sure the modified MAC address has taken effect
Under WIN2000:.
a. On the desktop, right-click on the Internet Neighborhood icon, select "Properties", and in the "Network and Dial-up Connections" window, there are generally two icons, one is the "New Connection" icon, and the other is the "My Connections" icon. If you have two NICs on your machine, there will be three icons. If you only have one NIC, right-click on the My Connections icon, select Properties, and a My Connections
Properties window will appear. In the upper part of the window, there is a "Connecting with:" sign, and below that is the model number of the NIC in your machine. In the following there is a "Configuration" button, click on the button to enter the card's properties dialog box, this dialog box has five property pages, click on the second "Advanced" page, in the "Properties" logo there are two items: a "Link
Speed/Duplex Mode", which is set to the card's operating rate, we need to change the following a "Network
Speed/Duplex Mode". Network
Address", click on the item, in the dialog box on the right under the "Value" logo there are two single option, the default is "does not exist"
, we just need to select the above a single option, and then in the box on the right to enter the MAC address of the card that you want to change, click "OK", and wait for a while, the address of the network card will be changed, and you do not even need to deactivate the network card! You don't even have to disable the card!
You can also open the NIC's properties page in the Settings Manager to change it, which has the same effect.
b.1. In "HKEY_LOCAL_MACHINE\SYS
?
TEM\CurrentControlSet\Control\Class\4D36
?
E972-E325-11CE-BFC1-08002BE10318??€€?€€0000, 0001, 0002 "?€€?€€?€€?€€?€€Because you may have more than one NIC installed, there are more than one "0000, 0001 "?€€?€€?€€?€€?€€?€€?€€?€€?€€TEM\CurrentControlSet\Control\Class\4D36
?
Because you may have more than one NIC installed, there may be more than one key like "0000, 0001" under this key, so you can look for the DriverDesc that matches the description of the NIC you want to modify, such as "0000".
?
2. Under the primary key mentioned above, add a string with the name "NetworkAddress", set its value to the MAC address you want, and write it consecutively. Such as "001010101010".
?
3. Then add a primary key value of "NetworkAddress" to "NDI\params" under the primary key, and add a string named "default" under the primary key. Under this key, add a string named "default", the value of which should be the MAC address to be set, and should be written consecutively, such as "001010101010".
?
Note that this is actually just the "initial value" set in the advanced properties mentioned later, the actual MAC address used still depends on the "NetworkAddress" parameter mentioned in point 2, and once set, the value in the advanced properties will be the "default value". The actual MAC address used still depends on the "NetworkAddress" parameter mentioned in point 2, and once it is set, the value in the advanced properties will be the value given by "NetworkAddress" instead of "default".
?
4. Under the primary key for "NetworkAddress", go ahead and add a string called "ParamDesc" that specifies the value of the " NetworkAddress" key description, its value can be "MAC
Address" (you can also set, this is just a description, it does not matter, this value will be in the future you directly modify the MAC address when the description appears). After a reboot, open Network Neighborhood Properties, and double-click on the appropriate NIC entry to find an advanced setting, under which there is a MAC
Address
(which is the ParamDesc you set up earlier, as shown in Figure (^29041103a^)1) option, and which is the new entry you added to the registry in the second step. "NetworkAddress", in the future, just modify the MAC address here.
?
5. Close the registry editor and reboot, your NIC address has been changed. Open Network Neighborhood Properties, double-click the corresponding NIC item will find a MAC
Address advanced settings item. This is used to modify the MAC address directly, and it allows you to change the MAC at any time without having to reboot.
Under WinXP
Most NICs can have their MAC address changed by modifying the NIC properties in the Control Panel. In Device Manager, right-click on the icon of the NIC whose MAC address you want to change, and select the Properties/Advanced tab. In the Properties area, you will see an item called "Network
Address" or some other similar name. Click on it, and on the right side, under "Value", enter the value you want to change. Click on it, and on the right side, under "Value", enter the value of the MAC address you want to specify. Enter 12 consecutive hexadecimal digits or letters without a "-" in between.
In addition, there are several software that can modify the MAC can be run under XP/W2K, you can go to the Internet to search for, so here will not be detailed
linux:
You need to use #ifconfig eth0 down first to disable the network card , and then use ifconfig eth0 hw ether
1234567890ab , so you can change the success
To change permanently, in /etc/rc.d/rc.local add these three sentences (can also be in /etc/init.d/network add the following three lines)
ifconfig eth0 down
ifconfig eth0 hw ether 1234567890ab
ifconfig eth0 up
If you want to restore the MAC address of your network card, just select the radio button to the right of the "Network
Address" item again to the following one: "Not shown", and then reboot. The following are the options for the "Network
Address" item. In WIN2000, you can select "Nonexistent", so you don't have to reboot.
Second, through the SNMP (Simple Network Management Protocol) to discover multiple *** enjoy the Internet. Some routers and ADSL cats have built-in SNMP services, through scanning software (ipscan, superscan......) Scanning, found that the open port 161, 161 is SNMP (Simple Network Management Protocol) service port, is it through the SNMP protocol to discover the number of hosts, with xscan on the cat vulnerability scanning, indeed, there is a default password, logged in to the cat's management interface, but can not find the place to close the SNMP service, it seems to leave the backdoor, which can be basically concluded that the number of hosts discovered by SNMP protocol. This basically concludes that the number of hosts discovered through the SNMP protocol. In order to further confirm, with a management software ActiveSNMP SNMP view ADSL cat connection, as shown in Figure 2, you can clearly see through the SNMP protocol can be found at the same time the number of hosts on the Internet.
Solution:
1. If the cat can close the SNMP protocol, then the SNMP with port 161 to prohibit the line. Use the router or open the ADSL cat's route mode *** enjoy the Internet friends can enter the management interface to close the SNMP option to turn it off. If the cat's management interface does not have the option to turn off SNMP, you have to buy a router without SNMP service, such as TP-LINK
TL-R400, and put it in the middle of the adsl
moden and hub, as shown in the figure below. In this router and then do a NAT service, so that into the ADSL cat is an address, which solves the problem of *** enjoy Internet.
Note that the SNMP protocol should be disabled in the router.
2. Modify the configuration file, you can convert the configuration into a file, use the binary editing tool to modify the default password, and then load it into the cat, this is just an idea, have not tried
3. Monitor the number of concurrent ports, concurrent ports more than the number of settings determined to be the *** enjoy.
This is a ridiculous setup, the "Network Vanguard" keeps scanning the number of ports opened by the user, more than the set value is judged to be **** enjoy, sometimes even press F5 a few times it is considered to be **** enjoy, and even the single-user Internet access is also affected, this will not be able to crack the (unless you hack the Network Vanguard), I'm here to help. The solution here is to pretend to be an innocent user to the ISP's customer service phone to scold, and declare that it can not change the ISP, a moment of the network will be normal.
Fourth, the "network of soldiers" also used an unknown method from the *** enjoy the computer to detect the *** enjoy the information, the current solution is that all *** enjoy the client to install a firewall, the level of security is set to the highest, because of the limited conditions, only try a few kinds of firewalls, and found that the Kingsoft Web Dart V ( /Soft_Show.asp?SoftID=10) is useful, the IP configuration rules inside all the rules to allow others to access the machine do not want to allow PING this machine do not prevent ICMP, IGMP attacks should also be checked. If it is WINXP, to open the network firewall of the network card.
After taking the above crack, I can't see the machine in my own LAN, and after WINXP opens the network firewall of the network card, I can't transfer files in QQ, and the speed of the network is slowed down, but finally I can **** enjoy it again.
In general, the "Network Vanguard" is still an immature product, mainly because of its impact on single-user Internet browsing, which often requires a few refreshes to browse the web, and some web pages are more complex, and you have to call a few server files to enjoy the web part of the web page as if you were a ******, which can't be displayed. This is a great way to get the most out of your Windows 7 experience.