Attackers can bypass the school's h3c binding to mac.

I bought a notebook and wanted to access the Internet, but I used the school broadband, that is, the H3c dial-up type. The ip address and mac are bound! As a result, I saw a method and tested it! Share with you!
First, change the mac of my laptop to the previously bound mac.
In network sharing and center (win7), click Local Connection> Properties> Configuration> advanced> network address. The default value is that the selected IP address does not exist. Then, you can change it to the previously bound mac address.
(Baidu, modify the mac address)
After modification, you must restart the h3c client. After restart, do not start the h3c client. First modify the registry and find the NetworkAddress under HKLM \ SYSTEM \ CurrentControlSet \ Class \ {4D36E972-E325-11CE-BFC1-08002BE10318} \ 0011!
Start the h3c client!
Then OK! But I cannot restart my computer!
Principle: it is estimated that the Registry will be detected when h3c is started. If NetworkAddress exists in the registry, it will show that the mac binding failed or you have modified the mac! So we will delete it!
As a result, I wrote a batch processing job. I am a newbie and I am selling it now. The experts have seen it and want to improve it!
According to the principle, first modify mac -- restart --- Delete mac -- start h3c --- modify mac
 
Title H3C networking

Tasklist | find/I "iNode Client.exe"
If % errorlevel % = 0 goto s: Process judgment

REG Delete HKLM \ SYSTEM \ CurrentControlSet \ Class \ {4D36E972-E325-11CE-BFC1-08002BE10318 }\ 0011/v NetworkAddress: Delete

"D: \ Program Files \ iNode Client \ iNode Client.exe"-p 8021-c 8022: Start h3c

: S

REG Add HKLM \ SYSTEM \ CurrentControlSet \ Class \ {4D36E972-E325-11CE-BFC1-08002BE10318} \ 0011/v NetworkAddress/t REG_SZ/d 0030677196B7: Add

Exit
Usage: Modify Your h3c startup path! Copy to notepad and save the batchcompute file with the bat suffix! Start the instance as an administrator after the instance is started. Otherwise, the instance fails to be started.
This batch processing is a little inconvenient to use. When running, the doc page is displayed, prompting whether to delete the registry key value. Select y, then it starts h3c, which is estimated to be a little slow (about 6 seconds). Then you click Connect. After the connection is complete, close the doc interface and run it as an administrator, this time will flash off! (This is to prepare for the next restart, that is, to write the mac to the Registry)