Viewing Code - shadowmac
a patch to forge mac addr's on OSX
shadowmac is a patch that allows you to forge the mac address of (almost) any ethernet device on OSX. included is a kernel patch to xnu-517.7.21 and some userland code that interfaces with it. Also included is a hacked ISC dhclient that is aware of the shadowmac interface. What makes this unique is that it rewrites the mac on the wire on way way out/in. That means other kernel level code (like proprietary wireless card drivers that are tied to macs such as IOXperts), keep working with it. Oh, the patch also handles forging the payload in arp packets, so no need for userland utils to poision things.