April 08, 2025

Miggitty Miggitty Mac Address

A MAC address is how your router tells one device from another on your network. It's unique — kind of like your device's fingerprint. Six sets of two characters, separated by colons, made up of letters and numbers. Something like this:

01:aa:gg:88:bb:cc

What makes a MAC address

The first six characters are the Organizationally Unique Identifier, or OUI. That's the part that tells you who made the network chip. To decode it you run it through a lookup database — the IEEE's public OUI lookup tool and Wireshark's online OUI search are two of the go-to ones, and there are plenty more. Some are kept more up to date than others, so if you can't find an OUI in one, try another.

A tool like the WiFi Pineapple can hit OUI resources directly, which makes it a quick way to fingerprint hardware while you're doing network analysis.

OUIs for research

Knowing the OUI is a real shortcut. Where you'd otherwise be blind and guessing, the manufacturer alone can point you at default login credentials, usernames, and passwords for that gear. That's the whole value of it — it turns "some device" into "that exact model, and here's how it ships from the factory."

Finding that MAC address

But… where? What is that MAC address? 🥳

Where and how do you actually locate a MAC address? I'll go deeper in a future post, but for now here's an animated screen capture that flashes through the many places you can find one. Most of the time you're searching for the IP address and the results include the MAC right alongside it. It's also printed on the product packaging, usually around the UPC.

A word (or many) of caution

Be careful

For the devious among you: it pays to understand everything above and take it seriously from an OpSec standpoint. Don't pay attention and you're leaving your big fat greasy fingerprints all over the place — and yeah, greasy, because you just scarfed down some fried chicken 🍗 and fries, and you're one of those people who dips fries in mayo (me, sometimes… a guilty pleasure). Keep that in mind if you're trying to go incognito.

Activities like wardriving can drop those identifiers on a map, giving away your locations and whereabouts. Picture it: your MAC/IP gets logged at 5pm downtown, then again ten minutes later at a coffee shop near a banking hub with open internet your device auto-joins. Twenty-five minutes after that your MAC shows up in a rough part of town, logged by some free WiFi access point, lingering ten, fifteen, twenty minutes. The next hit is back at the transit station, headed for the burbs. What can you read off that trail? Someone headed home after a long day, picking up a few "treats" along the way? Or maybe it was just a hip new food truck that happened to park in a sketchy block.

That's a general example of how a MAC address can be used to paint a picture of your life and pin it to you.

I'll do a follow-up that gets into the technical side — commands to locate, update, and change your MAC, more uses, more scenarios, more tales of caution. I know a lot of the above is stuff you've known for decades, so sorry if I bored you. Don't worry, it'll heat up and get spicy. Keep an eye out for new content, and in the meantime drop a comment with anything you'd like to learn, or want to share — maybe some tools?

For now, I'll leave it there.

Sources