How to get past a bios password on a target machine

[thepacifist]

Imagine this, you want to get in to a computer. You don't know the windows administrator password, but KonBoot should take care of that quite easily. The real problem is that you can't coot in to KonBoot because the boot order and bios are password protected. The obvious methods are resetting the motherboard jumper, or taking out the battery and waiting a bit. But you want to do it inconspicuously without turning the PC on its side and opening it up in front of dozens of people. You have access to a basic user account. How would you gain access to that computer?

[proxx]

Many BIOS's have default passwords.

[techb]

metasploit/other priv esculation attacks.  GO introduce yourself.

That doesn't necessarily mean you can do it from within the OS. Most BIOS's can only be set/changed during boot. Some, however, like toshiba have a tool called HWSetup or something similar that can be used.

A BIOS update might remove the password, but I haven't tried it.

Simply having admin rights on a computer does absolutely nothing, and is bad advice, you should feel bad.

Resetting or removing the battery is the best and most effective option. You have to remember, the BIOS starts and controls whether or not the actual OS will boot in the first place. The OS has nothing to do with it.

[thepacifist]

Thanks. They're intel motherboards so I'll see if there is a default password or one of the aforementioned tools.

[Darkcast]

Depending on the model of the hardware their could safety precautions for example the password could be burn into the motherboard and the only way to reset it is with a passkey

[Architect]

Most BIOS can be defeated with rainbow tables attacks.

[mohittiwari009]

I have seen a device....like com port connector....you can make it yourself and can plug into your com port or VGA port to short the BIOS WITHOUT OPENING THE CASE

You can use YouTube to make this port

[voodoo]

There is a jumper on the motherboard.  Bridging the connection will circumvent the bios password.  Physical access and its game over.

[Nortcele]

If using the jumper on the motherboard/removing the CMOS doesn't work, can you tell me what machine it is? Sometimes there are keyboard inputs that you can put in on boot to reset/negate BIOS passwords.

[FinalFrontier]

I think we are in the same seat on this one, but I would like to expand my problem.
My school has a system where by when you want to log into the computer you write you usr&pass and it
connects to a server from where it fetches your user.
They have the computers chassis locked and the bios has a password protect so I can't access the boot order and
boot form ... lets say Kon.
What can I do? And can Kon deal with the fetching from a server part?

[d3crypt]

At the risk of sounding like an idiot, is there any risk to damaging a computer by doing this?

[Nortcele]

At the risk of sounding like an idiot, is there any risk to damaging a computer by doing this?

Not really, but there is always a chance of corruption in files/making a mistake shouldn't be too much to worry about though

[Nortcele]

I think we are in the same seat on this one, but I would like to expand my problem.
My school has a system where by when you want to log into the computer you write you usr&pass and it
connects to a server from where it fetches your user.
They have the computers chassis locked and the bios has a password protect so I can't access the boot order and
boot form ... lets say Kon.
What can I do? And can Kon deal with the fetching from a server part?

Why do you need to do this?

[FinalFrontier]

Why do you need to do this?

Just because, I do not want to inflict damage, just wanna play around alittle.

[Nortcele]

-.-