Password-Protected Windows 10

If I got it right, having or not EFS is just a presumption, not a fact. Why not simply create a binary copy to another HDD or SSD, replace the .dll file for password bypass on the clone, boot the clone.

If anything goes wrong, you will always have the original drive in it's current state, so there is nothing to loose ?!

If I got it right, having or not EFS is just a presumption, not a fact. Why not simply create a binary copy to another HDD or SSD, replace the .dll file for password bypass on the clone, boot the clone.

If anything goes wrong, you will always have the original drive in it's current state, so there is nothing to loose ?!

The EFS, from the little data points we have, JimC's and my (little) expereince is a rare, rare, rare case.

To make a forensic image (or clone) is anyway the first thing to do to preserve the evidence.

As a matter of fact (provided that the image or "clone" is "forensically sound") there is no real need to modify and boot the clone (imagine that you have to do that on (say) a stupid Surface
https://it.ifixit.com/Guide/Microsoft+Surface+Pro+4+SSD+Drive+Replacement/60383
unless you have a router available 😯 it will be tough (but you can still use a Dremel+stand) wink
http//surfacepro3ssdupgrade.blogspot.com/2015/02/surface-pro-3-ssd-upgrade-i7-with-1-tb.html

You can modify and boot the original (and later restore to it the "clone" or forensic image).

jaclaz

Thank you @Jaclaz for the helpful summary of the different methods.

Methods (1) and (2) both provide a system-level command-prompt at the login screen. This can be used to reset an account password. Method (3) by-passes this and permits login with any password. The end result is the almost same and all 3 methods require file system access to an unencrypted OS volume.

However, something which I don't think has been mentioned yet is that once the password has been changed (or bypassed) you will no longer have access to EFS encrypted data or other secrets protected by the Windows credential manager.

I would be interested to learn from other practitioners if this scenario has come up or is changing/bypassing the password sufficient in practice despite the limitation?

Jim

www.binarymarkup.com

If you don't want to lose access to EFS encrypted files or stored network/browser passwords, you have no other way but to recover the old password. Besides using Ophcrack to crack the password using rainbow tables, you can also use the following softwares to recover your password with GPU hardware acceleration

RainbowCrack - http//project-rainbowcrack.com/
HashCat - https://hashcat.net/hashcat/
Password Recovery Bundle - https://www.recoverywindowspassword.com/bypass-windows-10-8-7-login-password.htmlrecovery.html
Proactive System Password Recovery - https://www.elcomsoft.com/pspr.html

A high-end graphics card can boost the cracking speed a lot.

Thank you for your advice / tool,i have tested it on my computer one by one .
And the computer has been unlocked .

Thank you for your advice / tool,i have tested it on my computer one by one .

Why? 😯
I mean, 4 (four) or more possible approaches have been provided, if you have a locked computer and you want to unlock it, usually you try the methods one by one UNTIL you manage to unlock it.
Or is it a research/test project analtizing the various possibilities?

And the computer has been unlocked .

Sure ) , but HOW EXACTLY, i.e. through using which one(s) or *all* of the provided methods?

jaclaz

Two tools I share, one free and one non-free,I tried them on my computer.

Two tools I share, one free and one non-free,I tried them on my computer.

I got it.Google does a very good job,it will provide many effective methods about Windows password reset.
More info
https://www.winpwd.com/
https://www.openwall.com/john/

I personally think that cracking the password protection of Windows 10 is very simple. You just need to delete the password, but how to delete it?Using Kon-Boot or Cain & Abel.
https://www.filehorse.com/download-cain-and-abel/
https://www.logitheque.com/en/windows/kon-boot-32698
https://www.passgeeker.com/unlock-windows-10-computer-without-password.html

Posted by: @dyball

I personally think that cracking the password protection of Windows 10 is very simple. You just need to delete the password, but how to delete it?Using Kon-Boot or Cain & Abel.
https://www.softcroco.com/download-cain-abel/
https://www.logitheque.com/en/windows/kon-boot-32698
https://www.passgeeker.com/unlock-windows-10-computer-without-password.html

Thank you for your helpful replay!

Can I use Cain And Abel utility to unlock my forgotten Windows 7 passwords? I lost my login password long time ago and I am unable to reset it back 🙁