Author Topic: HP Probooks  (Read 610 times)

0 Members and 1 Guest are viewing this topic.

Offline Nortcele

  • Knight
  • **
  • Posts: 211
  • Cookies: -42
  • █+█=██
    • View Profile
HP Probooks
« on: October 22, 2014, 04:34:06 pm »
HP Probooks come standard with dual password protection in the form of a GUI for a BIOS password,

This BIOS password can not be reset by removing the CMOS battery, removing the chip or even resetting the motherboard.

I was stumped for a while on what to do but after a decent amount of research I managed to find a keyboard input to allow the BIOS to be set to factory defaults.

Hold Windows Key+Up arrow+Down arrow and whilst holding them press the power button.

When the splash screen comes up repeatedly click F10,

This will give you access to the setting screen where you can edit the passwords and reset to defaults.

Just wandering what you think.. Does this not negate the point of having the BIOS password? If you can reset it without having any outside input surely there is no need to have the password in the first place...

Ah well this seems to be similar to the exploit in the Win7 and WinXP versions (Patched in Win8) where you can edit the system files without logging in using a hidden text document in system restore. Here you can rename the cmd.exe file to 'sethc.exe' which is the sticky keys file.

Then on reboot activating the sticky keys will give you access to an Admin CMD in the form of the user 'X'.

Makes me wander how secure we are when it comes to hardware...

What are your thoughts?
~JaySec
~LulzBlog

TAKE A COOKIE!




0100000101010011010000110100100101001001

Offline Nortcele

  • Knight
  • **
  • Posts: 211
  • Cookies: -42
  • █+█=██
    • View Profile
Re: HP Probooks
« Reply #1 on: October 24, 2014, 04:20:32 pm »
Any thoughts?
~JaySec
~LulzBlog

TAKE A COOKIE!




0100000101010011010000110100100101001001

Offline TheWormKill

  • EZ's Scripting Whore
  • Global Moderator
  • Knight
  • *
  • Posts: 257
  • Cookies: 66
  • The Grim Reaper of Worms
    • View Profile
Re: HP Probooks
« Reply #2 on: October 24, 2014, 05:48:32 pm »
as someone said: As soon as you got physical access to a system, it's just a matter of time until you can get access to it in a more... "powerful" way.
Stuff I did: How to think like a superuser, Iridium

He should make that "Haskell"
Quote
<m0rph-is-gay> fuck you thewormkill you python coding mother fucker

Offline Nortcele

  • Knight
  • **
  • Posts: 211
  • Cookies: -42
  • █+█=██
    • View Profile
Re: HP Probooks
« Reply #3 on: October 27, 2014, 02:43:31 pm »
Indeed.
~JaySec
~LulzBlog

TAKE A COOKIE!




0100000101010011010000110100100101001001