linux-server-setup/scripts/spoof_mac_address.sh

#!/bin/bash

# Easily set up a spoofed MAC address to a network interface on systemd-based Linux systems.
# Based on: https://wiki.archlinux.org/index.php/MAC_address_spoofing#Method_1:_systemd-networkd

# Copyright: Pekka Helenius (~Fincer), 2018

# Randomizing/Modifying MAC address may disturb malicious ARP scans (device idenfitication) and may help circumventing MAC-based restrictions which may be present on the local network.
# Use only at your own risk. Spoofing MAC address may not be accepted in all situations, may be illegal and may cause legal troubles. You have been warned.

#genmac() {

    trap ctrl_c INT

    function ctrl_c() {
            echo -e "\nAborting.\n"
            exit
            #return
    }

    random_mac() {
		# Author: Aaron Toponce
		# https://serverfault.com/questions/299556/how-to-generate-a-random-mac-address-from-the-linux-command-line/631119#631119
        MAC=$(printf '%02x' $((0x$(od /dev/urandom -N1 -t x1 -An | cut -c 2-) & 0xFE | 0x02)); od /dev/urandom -N5 -t x1 -An | sed 's/ /:/g')
    }

    insert_mac() {
        echo -e "\nChanging MAC address information (root permission required).\n"
        
        sudo sed -i "/\[Link\]/!b;n;cMACAddress=$MAC" /etc/systemd/network/00-default.link
        echo -e "MAC address changed from '$MAC_OLD' to '$MAC' for interface '$MAC_DEVICE'.\n\nPlease restart this interface to apply the changes.\n\nTo restore original MAC address, either delete configuration file '/etc/systemd/network/$linkname' or set real MAC address manually into it.\n"
        exit 0
        #return 0
    }

    geninsert_mac() {

        gennew_mac() {
        
            while true; do
                unset response
                read -r -p "Generate a new MAC address? [Y/n] " response
                
                if [[ $(echo $response | sed 's/ //g') =~ ^([yY][eE][sS]|[yY])$ ]]; then
                    random_mac
                    newname_mac
                else
                    echo -e "\nKeeping old MAC address configuration.\n"
                    exit
                    #return
                fi
            done
        }

        newname_mac() {
            unset response
            read -r -p "New MAC address for '$MAC_DEVICE' will be '$MAC'. Accept? [Y/n] " response
        
            if [[ $(echo $response | sed 's/ //g') =~ ^([yY][eE][sS]|[yY])$ ]]; then
                insert_mac
            else
                gennew_mac
            fi
        }
        newname_mac
    }

    gen_mac() {

        real_mac() {

            AVAILABLE_MACS=$(ip -br link show | sed '/LOOPBACK/d' | awk '{print NR"\t"$1"\t"$3"\t"$2}')
            
            IFS=$'\n'

            echo -e "\nAvailable network interfaces with their MAC addresses are:\n\n${AVAILABLE_MACS[*]}"
            
            echo -e "\nPlease select the interface which MAC address you want to spoof of\n"
            read -r -p "Selection [number]: " number
            
            if [[ ! $number =~ ^[0-9]+$ ]]; then
                echo -e "\nInvalid input value. Aborting.\n"
                exit 1
                #return 1
            fi
            
            for INTERFACE in $(echo -e "${AVAILABLE_MACS[*]}"); do
            
                intf_num=$(echo $INTERFACE | awk '{print $1}')

                if [[ $number -eq $intf_num ]]; then
                    MAC_REAL=$(echo $INTERFACE | awk '{print $3}')
                    MAC_DEVICE=$(echo $INTERFACE | awk '{print $2}')
                    break
                fi
            done
            unset IFS

            if [[ $MAC_REAL == "" ]]; then
                echo -e "\nNot a valid MAC address found for interface number $number. Aborting.\n"
                exit 1
                #return 1
            fi

        }

        real_mac

        PREV_CONF=$(grep -Ril "$MAC_REAL" /etc/systemd/network/ | grep -E "[0-9]{,2}\-default\.link$")
        
        if [[ ! $(echo $PREV_CONF | wc -w) -eq 0 ]]; then 
            echo -e "\nUsing existing configuration file for interface '$MAC_DEVICE':\n$PREV_CONF\n"
            linkname=$(basename $PREV_CONF)
            MAC_OLD=$(awk -F= '/\[Link\]/{getline; print $2}' $PREV_CONF)
        else
            MAC_OLD=$MAC_REAL
            echo -e "\nPrevious configuration file not found. Creating it (root permission required).\n"
            read -r -p "Configuration file name? (must follow syntax: 00-default.link, 41-default.link, 98-default.link etc.): " linkname

            if [[ "$linkname" =~ ^[0-9]{,2}\-default\.link$ ]]; then
            
                if [[ ! $(sudo -n true) ]]; then
                    sudo echo ""
                fi
            
                echo -e "[Match]\nMACAddress=$MAC_REAL\n\n[Link]\nMACAddress=$MAC_REAL\nNamePolicy=kernel database onboard slot path" \
                | sudo tee /etc/systemd/network/$linkname > /dev/null
                
                echo -e "Created new configuration file: /etc/systemd/network/$linkname\n"
            else
                echo -e "\nInvalid file name given. Aborting.\n"
                exit 1
            fi
        fi

        unset response
        echo -e "Either randomly generated or manually specified MAC address can be used.\n"
        read -r -p "Do you want to use randomly generated MAC address? [Y/n] " response

        if [[ $(echo $response | sed 's/ //g') =~ ^([yY][eE][sS]|[yY])$ ]]; then
            random_mac
            geninsert_mac
        else
        
            if [[ $(echo $response | sed 's/ //g') =~ ^([nN][oO]|[nN])$ ]]; then
                read -r -p "Please type a new MAC address (Syntax is e.g. aa:bb:33:zz:f0:4a): " MAC
                maxtries=5
                while [[ $maxtries -gt 0 ]]; do

                    case "$MAC" in 
                    [[:xdigit:]][[:xdigit:]]:[[:xdigit:]][[:xdigit:]]:[[:xdigit:]][[:xdigit:]]:[[:xdigit:]][[:xdigit:]]:[[:xdigit:]][[:xdigit:]]:[[:xdigit:]][[:xdigit:]])
                        insert_mac
                        ;;
                    esac
                    unset MAC
                    read -r -p "Invalid MAC address given. Please type again ($maxtries tries left): " MAC
                    let maxtries--
                done
            else
                echo -e "\nInvalid answer. Aborting.\n"
            fi
        fi
    }

    echo -e "\nWARNING: Changing MAC address WILL DISRUPT connections to any network device using MAC-based authentication methods. These devices may include configured routers, WiFi hotspots etc. Remember to write down the new MAC address, and make sure you are authorized to configure the MAC address to all affected network devices if needed.\n"
    read -r -p "You are going to spoof a MAC address of this computer. Are you sure? [Y/n] " response

    if [[ $(echo $response | sed 's/ //g') =~ ^([yY][eE][sS]|[yY])$ ]]; then
        gen_mac
    else
        echo -e "\nKeeping old MAC address configuration.\n"
    fi

#}