← LibraryTechnique entry
N-NAC-BYPASS-MACDefense Evasion
NAC Bypass via MAC Spoof
Clone the MAC of an authenticated device (printer, IP phone, VoIP) — most 802.1x deployments allow MAC-Auth-Bypass for these.
§ Where this technique fits
N-NAC-BYPASS-MAC is catalogued under the Defense Evasion tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.
§ Dossiers chaining this technique
§ What commonly comes next
- 01Valid Accountsseen 1×T1078 · Initial Access