Mac Clone

[proyo-code]

they clone the existing mac and used it it still works

[0xbitx]

MAC cloning alone won’t bypass the lock because the device doesn’t just check the MAC; it computes an expected hash from the current MAC and salt, then compares that to the hash already stored in EEPROM. Spoofing the MAC only changes the computed value, not the stored one, so they won’t match unless the attacker also writes the corresponding hash into EEPROM. The simplest way to bypass it is to extract the salt key and use it to generate a valid registration code.