Skip to content
← LibraryTechnique entry
N-NAC-BYPASS-MACDefense Evasion

NAC Bypass via MAC Spoof

Clone the MAC of an authenticated device (printer, IP phone, VoIP) — most 802.1x deployments allow MAC-Auth-Bypass for these.

§ Where this technique fits

N-NAC-BYPASS-MAC is catalogued under the Defense Evasion tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Valid Accounts
    T1078 · Initial Access
    seen 1×