PDA

View Full Version : Kon-Boot - bypass logon with knowing password


AtYourService
04-25-2009, 03:41 PM
wrote about this on my other site
http://www.whatsmypass.com/?p=604#more-604


Accessing a Windows computer without knowing the password is fairly simple with this free tool called Kon-Boot .There are alternatives like Ophcrack etc, but those rely on grabbing the SAM hashes and cracking those. What sets Kon-Boot apart is that is modifies the kernel on-the-fly while booting (everything is done virtually - without any interferences with physical system changes) and allows you to log into any account without entering a password. All you have to do is insert a boot (cd or floppy) disk burned with Kon-boot software(110kb) in to the computer and boot up.


Kon-boot which was initially started as a small project for Linux (mainly Ubuntu),where it allows to log into a Linux system as ‘root’ user without typing the correct password or to elevate privileges from current user to root. Now it was moved to windows platform where it enables Windows users to login to any password protected machine profile without any knowledge of the password.
This program works with the following versions of Windows: XP (SP1, SP2, SP3), Vista (Business, Ultimate), 2000, Server 2003 and 2008, and Windows 7. Kon-Boot also allows you to boot Linux (distributions: Ubuntu, Gentoo, Debian and Fedora) without a password as well.

http://www.piotrbania.com/all/kon-boot/


I ran into a problem with it working on a few hp d220mt machines , it was odd that it didnt work but I was able to get it to work on some other test machines

alternatively i was reading in the news recently about a similar tool call vbootkit 2.0 being released this week that was an updated version of something they talked about 2 years ago http://www.nvlabs.in/archives/0-Hack-in-the-Box-Dubai-2009.html

abe
04-26-2009, 04:01 AM
great, ,,,,

dhrandy
04-27-2009, 02:20 AM
Very nice. I'll have to add it to the collection.

abe
04-27-2009, 03:01 AM
i"ve used it twice already since yesterday and its great that i dont have to tell the owners to reenter their password or restore the password with the progs i already have.

rballard77
04-27-2009, 01:37 PM
This is an excellent tool. I downloaded it and tried it on my test machine. Thanks for providing the links.

TimeCode
04-27-2009, 05:27 PM
Sounds very cool. Thanks for the info.