#!# Forget your password?:: A simple help guide //WIndows

Every so often, we humans do something increadibly stupid. Like getting really drunk, making a stupid password, and forgetting it. Then you wake up the next morning wondering how you did something so daft.

Incase you have done something similar, or would like to prevent it from happening. I'll show you what you could do about it.

How this works::
In this guide I will be instructing you how to create a disk that will manipulate the Windows' kernel during it's bootstrap.
This is a VERY profound security hole! In this guide I will show you how you could use this to resque your computer or
make it impenetrable to boot sequence attacks.​

<guide>

First off, we need some materials::

A blank cd
Our utility *.iso image
Some sort of *.iso burner

Ok, our first step is to grab our iso image; you can find it here::
http://www.mediafire.com/?74qrm2h4oof17o7

/*
I forgot if this is a zipped file or not, if it is then you will need to extract it. Also try and save it somewhere memorable such as your desktop/documents folder
*/

Now you will need an iso burner, Nero will do it; if you don't have Nero then I suggest using freeiso burner. It's pretty good, I've never gotten a bad burn using it.

You can get freeisoburner here:
http://www.freeisoburner.com

Alright, now the next step is just as simple as the above. Open up freeisoburner (does not need to be installed, just runs) select the *.iso image you saved (in a memorable location) and select burn. After a few minutes your disk will be burned.

This is a boot cd, you invoke it by making sure your bios menu has your disk
drive before the hard drive in your boot order.

/*
You can enter the bios and change this by rapidly tapping f2 when you first
turn your computer on.
*/

Label your disk if you must, and store it somewhere will it will not be easily found by pranksters but still remembered by yourself incase you forget your password in the future.


</guide>

Due to the possibility for this disk to be used maliciously I will tell you how to harden your system so that this disk cannot be used against you.

Read on::

If you are not using Blink Personal Security or otherwise refuse to. I suggest downloading a copy of EEYE's retina vulnerability scanner, and applying their suggested patches. Your system will be hardened against kon disk. If you forget the password in such an event you will need to break the password manually.

###I WILL NOT WRITE A GUIDE ON THIS###

To get the best of both worlds you could move the cdrom out from before the HDD in the bios boot order. Then lock your bios with a password so only you may boot from a disk/usb.

I hope this guide helps, I have shown you how you could recover your system and anything stored on it should you forget your password (without using linux and/or reinstalling Windows) I have also shown you what you can do so that it can't be used against your system. I did not include pictures because I am currently on FreeBSD and thus taking windows pictures didn't happen.

Respect the privacy of others
Regards, 1ce

 

implying you cant just reset the bois to get rid of the password?

 

Assuming you have manageable firmware for my particular bios. (In which case to phlashing the bios becomes impossible since you would need to use a boot disk/drive, a feature that is currently disabled).

Another way to avoid it is AES drive locking. Make it require a password just to mount the file system xD (epic win)