How to bypass Win10...
 
Notifications
Clear all

How to bypass Win10 logon password?

8 Posts
3 Users
0 Likes
1,291 Views
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

Usually we will use LiveView or VFC to "boot up" the evidence files acquired from suspect's computer or laptop. What if his/her OS is Win10? Win10 has two account types. One is Local User Account, and the other is Live ID Account. For VFC to bypass Local User Account is just a piece of cake. Let's see if VFC could bypass the password of Live ID Account. You guys could take a look at my blog to see what's going on.
http//www.cnblogs.com/pieces0310/p/7288933.html

 
Posted : 05/08/2017 6:03 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Usually we will use LiveView or VFC to "boot up" the evidence files acquired from suspect's computer or laptop. What if his/her OS is Win10? Win10 has two account types. One is Local User Account, and the other is Live ID Account. For VFC to bypass Local User Account is just a piece of cake. Let's see if VFC could bypass the password of Live ID Account. You guys could take a look at my blog to see what's going on.
http//www.cnblogs.com/pieces0310/p/7288933.html

TL;DR
No.
The VFC doesn't work at all with Windows 10.
Moreover the suggested Lazesoft ONLY deals with Local Account AND it seems a lot like being NOT "forensic sound" as the password is NOT bypassed NOR recovered, but rather set to NULL (i.e. changed).

If anyone needs to bypass the password, (again Local Account ONLY) the"right" way is dll patching, via passpass or other method, some references

http//www.easy2boot.com/add-payload-files/windows-install-isos/passpass/

When the patch engine has been updated to this or that version of Windows 10 dll is to be seen.

jaclaz

 
Posted : 05/08/2017 2:18 pm
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

Hi Jaclaz,

Thanks for your comment. I'm not pretty sure about whether VFC could handle Win10 local user account password or not. This case as you could see in my blog is a Win10 including both Live ID account and local user account.

Now I don't have VFC dongle in hand. Couple days later I will test to see if VFC could bypass a Win10 with only local user account. If VFC fails, that would be a breaking news~

When we use LiveView or VFC to boot up evidence files, no matter what we do to this snapshot it won't do any harm to evidence files. Don't worry too much about forensic sound on this matter. Besides all we want is to "ENTER" suspect's computer/laptop. I'm not trying to advertise for Lazesoft. In this situation any tools could achieve this goal will do.

 
Posted : 06/08/2017 8:10 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Hi Jaclaz,

Thanks for your comment. I'm not pretty sure about whether VFC could handle Win10 local user account password or not. This case as you could see in my blog is a Win10 including both Live ID account and local user account.

Now I don't have VFC dongle in hand. Couple days later I will test to see if VFC could bypass a Win10 with only local user account. If VFC fails, that would be a breaking news~

When we use LiveView or VFC to boot up evidence files, no matter what we do to this snapshot it won't do any harm to evidence files. Don't worry too much about forensic sound on this matter. Besides all we want is to "ENTER" suspect's computer/laptop. I'm not trying to advertise for Lazesoft. In this situation any tools could achieve this goal will do.

Sure, the points were
1) there are tens of softwares that can change or reset the password ("Local account"), it is actually possible without using any third party software by simply using the install disc and making a copy of cmd.exe to sethc.exe.
2) there is one method that by changing a few bytes in a .dll used in the winlogon phase can effectively bypass the (still "Local Account") password.
3) there are ways (sometimes working, sometimes not working, to analyze the SAM hive and recover the password (still "Local Account") .
4)there is still another way (depending on version of windows, etc.) that allows making use of a "System" account on the "WinSta0\\Winlogon desktop" which may continue with a password change or reset
http//reboot.pro/topic/18792-if-anyone-is-up-for-a-challenge/

The four above are DIFFERENT methods, with different impact on the underlying system, they may all be good (or not) BUT you shouldn't call the one with the other's name.

jaclaz

 
Posted : 06/08/2017 6:00 pm
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

Jaclaz you are right. To my surprise VFC4 could not bypass either Win10 local user account password, nor LiveID account password. Thank God I did not spend money on it or I will go crazy. I'm used to use PE to handle logon password, and I'd like to share with other people those helpful tool no matter what the manufacturer is.

When I reset logon password of Win10, it only affect the snapshot generated by LiveView or VFC, and no doubt the evidence files are safe and sound. Like I said any tool could help me to deal with logon password so that I could enter this computer/laptop, to me it's a good tool. Expensive one like VFC or worth nothing like PE makes no difference to me.

 
Posted : 11/08/2017 6:57 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Jaclaz you are right. To my surprise VFC4 could not bypass either Win10 local user account password, nor LiveID account password. Thank God I did not spend money on it or I will go crazy. I'm used to use PE to handle logon password, and I'd like to share with other people those helpful tool no matter what the manufacturer is.

When I reset logon password of Win10, it only affect the snapshot generated by LiveView or VFC, and no doubt the evidence files are safe and sound. Like I said any tool could help me to deal with logon password so that I could enter this computer/laptop, to me it's a good tool. Expensive one like VFC or worth nothing like PE makes no difference to me.

And still you didn't get the message, which was only about the words used.

"Reset" is not a synonym of "bypass".

So now you have a thread and a blog post both titled "How to bypass Win10 logon password?" and in the blog
1) the specific VFC (which may be called a "bypass" method ) does NOT work on Windows 10
2) it is suggested INSTEAD one (among tens or hundreds of similar tools) that can reset (and NOT bypass) the Window password.

The suggestion was to call things with their name.

jaclaz

 
Posted : 11/08/2017 7:10 pm
(@bappion)
Posts: 1
New Member
 

It can be tricky without a password reset disk to do this.
But the following software say they can do that
https://www.winpwd.com/
https://www.password-changer.com/index.html
Let's help they are as help as they say they are.

 
Posted : 20/06/2019 9:37 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

It can be tricky without a password reset disk to do this.

… which - should it work - would reset (and NOT bypass) the password.

… link to a (usually crappy) Commercial password reset disk coming in 3. 2, 1 …

jaclaz

 
Posted : 20/06/2019 5:09 pm
Share: