+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Hack into a macbook air? (/showthread.php?tid=5437831)
Hack into a macbook air? - UnsaltedPeanuts - Oct 19, 2016
Recently, my school started to think about starting a 1-to-1 device policy, and gave some macbook airs to some students to test them out. The problem is, they've basically tried to shut down any access to it, besides a few things that they allow us to install.
What I want to know is, is it possible to get past the firmware password, without opening the system up, and removing ram?
To be honest, I don't actually know if this is possible, and I would like to avoid it if at all possible.[/i]
* - .eXe - Oct 19, 2016
Removing the RAM doesn't work on newer models. 2011 or older I believe. So in essence, no. There's nothing you can do unless you can do some privilege escalation.
* - Headdy - Oct 19, 2016
It's super easy. You have multiple options:
Option 1:
- Boot in single user mode (hold CMD + S on boot)
- Type: /sbin/fsck -fy
- Then type: /sbin/mount -uw /
- Type: launchctl load /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist
- Type: dscl . -passwd /Users/<username here> <new password here>
You can get usernames by typing: ls /Users
Options 2:
- Boot into recovery mode (hold CMD + R on boot)
- Press "Utilities" at the top, then click on "Terminal".
- Type: resetpassword
A menu will pop up and you'll be able to reset your password(s) there.
* - .eXe - Oct 20, 2016
(Oct 19, 2016 05:22 AM)Headdy Wrote: It's super easy. You have multiple options:
Option 1:
- Boot in single user mode (hold CMD + S on boot)
- Type: /sbin/fsck -fy
- Then type: /sbin/mount -uw /
- Type: launchctl load /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist
- Type: dscl . -passwd /Users/<username here> <new password here>
You can get usernames by typing: ls /Users
Options 2:
- Boot into recovery mode (hold CMD + R on boot)
- Press "Utilities" at the top, then click on "Terminal".
- Type: resetpassword
A menu will pop up and you'll be able to reset your password(s) there.
While that does get him access to the accounts, it sounds to me like there's a security profile on there which he needs to get round, as well as a FW Password.
* - Saltpeter - Oct 20, 2016
Isn't the ram soldered on in the Airs too?