+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] Bypass Win7,8,10 Admin Log In with a USB (/showthread.php?tid=5160063)
[Tutorial] Bypass Win7,8,10 Admin Log In with a USB - NinjaLeaks - Feb 5, 2016
Hello,
Welcome to my tutorial! I'm going to be showing you a way to bypass a administrator login on a Windows 7,8,10 computer.
All that you will need is a USB and Kon-Boot, which can be easily found online.
Step 1: Download the zip folder containing Kon-Boot and extract it to wherever you please.
![[Image: AxvOmsV.png]](https://i.imgur.com/AxvOmsV.png)
Step 2: Open the extracted folder and you should see:
![[Image: 6Verkgk.png]](https://i.imgur.com/6Verkgk.png)
open up 'kon-bootUSB'
Step 3: Plug in your USB and run 'usb_install_RUNASADMIN.bat' as a Administrator. (Make sure you run it as a administrator!)
The file should look something like:
![[Image: lOophda.png]](https://i.imgur.com/lOophda.png)
Step 4: You will get a pop up saying:
![[Image: 80zFq3R.png]](https://i.imgur.com/80zFq3R.png)
(Make sure that only the USB on which you want to install the bypass on is plugged in.)
Click ok.
Step 5: Verify that the USB is the correct one plugged in and click OK.
![[Image: 8EFxdeC.png]](https://i.imgur.com/8EFxdeC.png)
After clicking OK a message should appear saying that your USB is ready.
![[Image: C38Oad2.png]](https://imgur.com/C38Oad2.png)
Step 6: Now you can go to your targeted machine and plug the USB in.
Shut the targeted machine down and power it up with the USB plugged in.
Step 6: As the computer turns on hit the F1 or F2 key depending on how your computer is configured to enter its BIOS.
Step 7: Navigate to the boot settings and change that the computer boots off the USB flash drive.
BIOS looks something like this depending on your machine.
![[Image: nw6e5Hl.gif]](https://imgur.com/nw6e5Hl.gif)
Step 8: Save the changes and exit out of BIOS.
Step 9: Let the computer boot and if everything is done correctly you should get this screen:
![[Image: Eu74Ffd.png]](https://imgur.com/Eu74Ffd.png)
after a second or so on that screen it will ask you if you want to boot
Kon-Boot
or
Kon-Boot (Old)
Make sure that Kon-Boot is selected and hit enter.
Step 10: The computer should then boot normally and bring you to the log in screen.
![[Image: sQXt3we.png]](https://imgur.com/sQXt3we.png)
Select the admin user and instead of typing a password leave the password box blank and hit Enter.
Conclusion:
If everything works well you should now be in the administrative account! 👍 Please use this legally and use common sense :P
This was my first Tutorial so please let me know if there are anythings that I did wrong and could improve on!
Thanks!
-NinjaLeaks
* - DrDoktor - Feb 5, 2016
You should have got kon-boot 2 in 1
* - amagos10 - Feb 6, 2016
Will it this change the user's password or change any settings after restarting the pc/laptop?
* - Lukey159 - Feb 6, 2016
No, it just bypasses the users passwords. Once your've log on done what you need restart, remove the usb and boom the user logs on normally with their password.
Now because Kon Boot doesn’t actually know the password to the account, it is unavoidably inhibited in performing certain actions. The most noteworthy are:
Kon Boot does not allow you to change the password of the account used to log in. However, changing the password of other local accounts is possible.
You can not use the private keys stored in the Windows certificates store. These certificates are used to decrypt encrypted email, websites and other connections.
EFS (Encrypted File System) encrypted files can not be accessed because they are encrypted with the real password. An “access denied” message is displayed by the system.
Kon-boot does not allow you to bypass the authentication on an Active Directory domain. Only locally stored accounts can be accessed. However, cached accounts seem to be accessible in certain cases.
Also: Kon-Boot is now able to bypass online account authorization on Windows 8/8.1. On Windows 10 only local account authorization bypass is available (with possibility to add new administrator account automatically..
Nice TUT man, keep up the work..
* - NinjaLeaks - Feb 6, 2016
(Feb 6, 2016 04:48 AM)amagos10 Wrote: Will it this change the user's password or change any settings after restarting the pc/laptop?
This is only a temporary way to access the administrative account.
If you want to actually change their password you can do so by opening command prompt while logged in to their account and by typing:
"net user (Their exact username) *"
without the quotation marks and replace "(Their exact username)" with the username of the administrator.
It will ask you to put in a new password which then can be anything you set it to.
(Note when you type in the new password it might look like nothing is being typed even though it is.)
Hope this helps!!! ✌
* - timlennert - Feb 7, 2016
nice mate nice mate thanks!
* - NinjaLeaks - Feb 8, 2016
(Feb 7, 2016 02:32 PM)timlennert Wrote: nice mate nice mate thanks!
Np! Glad you liked it :D
Cheers 🤝
-NinjaLeaks
* - CyBEr_JeDi - Feb 8, 2016
Excellent tutorial, wish I had this at school. But you never know may come in handy :)
* - NinjaLeaks - Feb 8, 2016
(Feb 8, 2016 05:17 AM)CyBEr_JeDi Wrote: Excellent tutorial, wish I had this at school. But you never know may come in handy :)
Yeah it would totally come handy in school :P Thanks for the feedback!!!
Happy Hacking! 🤝
-NinjaLeaks
* - NinjaLeaks - Feb 9, 2016
(Feb 5, 2016 08:12 PM)DrDoktor Wrote: You should have got kon-boot 2 in 1
Yes sorry, I should have. Didn't think about it :P
Hope you still benefited a little 👍
-NinjaLeaks
* - ariton - Feb 11, 2016
Thanks for this awesome tutorial, I've bookmarked this.
* - NinjaLeaks - Feb 11, 2016
(Feb 11, 2016 03:09 PM)ariton Wrote: Thanks for this awesome tutorial, I've bookmarked this.
No problem! I'm glad you benefited from my tutorial! 🤝
Let me know if you have any questions or concerns :D
Cheers
-NinjaLeaks
* - n3cr0 - Feb 12, 2016
great tutorial. There are a number of ways of doing this. my favorite is the onscreen keyboard cmd rename tick to get a system shell
* - sunil kumar - Feb 12, 2016
THIS IS AWSOME ...................FANTASTIC ....I will use this i m still in college means 3 year of science so,i GONE USE THIS.........
THANKS BUDDY.......
* - Culture - Feb 12, 2016
Really nice tutorial,Thanks for sharing!I tried it on my pc(Window 7 prof 64bit)and is working :)