Friday, November 17, 2017

Windows 10 cracking

I work in IT so I frequently have an interest in checking out how the "other" team works their magic.  It comes up from time to time that for completely legitimet reasons I need to use tools that might be considered hacking tools. The most recent case of this came up a few days back, someone set a non-standard password a laptop that the company owns.  It wasn't written down and I've since forgotten it.  It's not critical, but it is the backup for a system that we use to control the lights in the facility. I tried different combinations for a few days, but finally decided to dip into my back of tricks.

The following video (that you'll need to turn on closed captioning for) shows the steps to break into an up to date windows 10 machine by having physcial access to the machine.

The short version is use the bios/boot options to boot into a windows installer disk. From there start the install and go to the repair this machine option.  Use the commandline to rename the on screen keyboard executable to osk.old and copy cmd.exe as osk.exe. Exit the install media and boot to the sign on screen.  On the sign on screen open the accessability menu and turn on the on screen keyboard.  Boom now you are running a command prompt with administrative rights.

The command net user <username> * lets you set a new password.

Time to break in is under 10 minutes.


No comments:

Post a Comment