Bypassing Windows Password via USB
Requirements:
- Kon-Boot for Windows 2.5.0
- USB drive
- Victims computer (It Can Bypass Windows XP, Windows Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 offline mode)
Steps:
- Download “Kon-Boot for Windows 2.5.0” - Google what's in the quotation marks << and you'll find some great sources. (Note: If you download from somewhere else, it might cause some error like "menu.lst file not found". In such case, go to the folder: Kon-Boot for Windows 2.5.0Kon-Boot for Windows 2.5.0kon-bootUSBUSBFILES rename konboot.lst to menu.lst)
- After downloading extract the .rar file somewhere on your computer drive.
- Insert USB drive to be used for bypassing.
- Double click “KonBootInstaller.exe”
- Click “OK” (Note: USB drive will be formatted)
- Select the Available USB drive from the drop-down (Note: Better to unplug any other USB drives connected except the target USB drive). Click on “Install to USB stick (with EFI support)
- Click “Yes” on the next screen
- The DiskPart utility will start in cmd, let the process get completed
- Voila!!!!
- Now insert this USB drive on your victim's computer and restart.
- Pay close attention to the first screen that appears. Look for a message that indicates which key you need to press in order to access the BIOS. That key is likely to be:
- A Function key (such as F1, F11, or F12)--The Esc key--The Delete key
- On the BIOS menu, select USB drive to boot from
- Once the KON-BOOT gets started, the KON-BOOT loading screen will appear.
- After this, windows login screen will appear. Just hit enter without typing password and you are done.
- After your work is done, just unplug the USB drive and let the computer book from itself. The user password will be there. You can easily access your victim’s PC without getting caught :p
- You can also reset the password of your victim's computer for a kind of DoS (Denial of Service) attack:
- Log in to the computer via KON-BOOT. Open cmd and hit the “Shift" key 5 times. Your cmd will be run as administrator.
- Now use the following command:
- >net user {username} {password}
- For removing the password, keep the password field blank:
- >net user ABC “”
- You can try various “net user” options. If you're wondering what these are, go ahead and Google it. ;)
