Bypass Windows & OS X Logins in seconds!

hello everyone zade from zed security here and in today's video i'm going to show you how to bypass login screens on both on windows and on os x smash the like button to show us support and help the channel grow as you know the more likes we get the more videos we'll make subscribe to the channel and hit the bell icon so you get notified every time we upload a video and let's go so to do this all we're going to need is a normal usb stick i'm going to show you how to configure it later on but right now let me show you how it's going to work all we'll need to do is connect this to the computer that you want to bypass its login screen restart the computer boot from it and you'll be able to log in with any password you want or sometimes even with a blank password so we're going to start with the os x computer right here because it's simpler and then we're going to go to the windows because i want to show you some extra tricks that you can do with windows so like i said all i need to do is connect this to the os x computer right here i'm going to zoom in the camera and we're simply going to restart the computer now on a mac to access the boot options we have to hold the options key from the keyboard as you can see i have three options right now and the one i want to boot from is the third one right here the efi boot this is my usb stick that i just connected we're gonna hit enter we're gonna press one to bypass logins for mac osx and we're gonna go with zero to log in with a blank or with with an existing account and we're gonna press any key to start this wait for the system to start and as you can see i'm back to my login screen with all of my users and they all have passwords but notice now when i click on my own user account i'm able to log in without entering a password and now i can pretty much do anything that the normal user zabi is able to do on their computer pretty cool now let's see what we can do with a windows computer so i'm gonna just change the hdmi port to my windows computer and i'm gonna disconnect the usb stick and we're gonna connect it to the windows computer and again just like we did with the os x we're gonna restart this computer and enter its boot options by pressing f12 now we're going to move the selector down to select our usb stick that we just connected using the arrows and hit enter to boot from it and then we're gonna go for zero to bypass windows login and zero again to use the default mode and press any key to continue we're gonna give it some time and it should let us access any user we want without entering its password even if secure boot is enabled and this can even be used to bypass online accounts and now we can click on any user to access it without a password or with any password that we want but before doing that i want to show you this really cool extra feature that allows us to control this computer with an elevated user using the command prompt so all we have to do even without logging in simply press the shift key a number of times to activate the sticky key feature of windows and because we boot it from con boot we're gonna get this nice command prompt and if i do who am i you'll see that i am running as an nt elevated user and right now i can do anything i want on the system with high privileges and i can even add new users enable remote desktop and connect remotely later on so that's really cool now let's close this and see if we can actually log into any user with any password or with a blank password i'm just gonna set the password to number one and perfect as you can see we're able to log in to this user account simply by typing any password we want and now we can do whatever we want on this computer so as you can see this can be useful in so many scenarios if you're doing a normal pen test and you got into the company and found any unattended computers or if you booked an appointment with someone and you're talking to them and they leave their desk but they lock their computer then again you can access it this way and obviously to capitalize on this you need to have your own backdoors ready as well on a usb stick so you can run them straight away or you can use the command prompt like i showed you there to add an user quickly and then enable remote desktop and maybe later on connect to the computer so it's a nice skill to have under your belt and obviously you can utilize it and use it in so many different scenarios now as you know the main thing that we did in this video is we connected a usb stick to these computers but what's on this usb stick and how are we able to log into these computers without entering the password so let's get technical and let me show you how to configure any usb stick so that you can use it in this manner and bypass logins on both on windows and osx so i'm here on my windows computer and first of all we need the program that we will flash to our usb stick or to our phone that will do all of the magic and allow us to bypass the login screens so the program is called con boot and you can download it from their official website con boot.com you can get the windows version the os x version or the two in one version which is the one that i have right now which allows us to bypass both the windows and the os x login screens and if you get the commercial license it will allow you to bypass secure boot as well now as you can see this is not a free program but i am giving away seven licenses for free all you have to do is like the video subscribe to the channel and fill the form in the description follow us on social media to see the winners and in two weeks before i release my next video i will pick seven winners and give them free licenses completely free now if you go ahead and purchase the license you will get an email from this website with this program right here with a link that will allow you to download this program and with your username and password that we will need later on so once you have the program here the next thing you need is a usb stick or a phone that we will flash this program to and we will connect it to the computers that we want to bypass logins on right now i already connected my usb stick sans disk you can see it right here and right now it's empty so it's fine because we're gonna flash this to it and we're good to go so i'm just gonna run the wizard here just double click it i'm gonna say yes we're gonna accept the agreement and we're gonna install it in this location and right here is just giving you a warning message telling you to disconnect any usb storage devices other than the one that you want to use that's what i have already it's advising you to use a storage device that has a capacity of less than 32 gigabytes and it recommends using a well-known manufacturer such as kingston sans disk and so on so that's all fine we're going to click on ok and as you can see you get a really nice wizard that is very easy to use to achieve our goal so the first two options will allow us to flash corn boot to a cd i don't want to do this a lot of computers don't even have cds these days and it's hard to carry a cd around it's much more convenient to flash it to a phone or to as usb storage device so we're actually gonna use the usb option in here but first of all we're gonna have to put the username and the password for our license you will get this in the same email that contains the download link for corn boot once you buy it so i'm going to put mine right now it's zayd as it security.org and put the password next we're going to select the usb device that we want to flash this to so in my case i want to flash it to this device the only one that's connected zero the sound disk device we're gonna keep this to the classic formatting scheme and i'm going to check this box to also bypass secure boot this only works on the commercial license which is a little bit more expensive and now that we're happy with everything i'm simply gonna click on install usb stick now this is another warning just telling you that your usb stick will be formatted and con boot will be flashed to it so we're going to say yeah that's fine and we're just going to give it its time to flash cone boot to the selected usb stick and perfect as you can see it's telling us that it's installed correctly so now we can use this usb stick to bypass login screens on both on windows and os x and we'll even be able to bypass secure boot all we have to do is connect it to the target computer restart boot from it then once we get to the login screen we're gonna put any password we want and it's gonna allow us to log in sometimes you'll even be able to log in with a blank password so as you can see it's not very hard to set up this tool and like i said it's a really handy tool to have under your belt and it can be used in so many scenarios there are actually a number of ways that you can use to bypass login screens a lot of them would require you to boot from a different operating system and manually do some work and then reboot again and access this computer so that can take some time and therefore this tool can be very handy and very useful because all you have to do is simply connect it boot and then you're able to log in so it'll save you so much time especially that putting in mind when you're doing this you'll probably want to do it as quick as possible because the actual user of the computer might come back at any minute let me know what you think of it in the comments and don't forget to like this video and subscribe to the channel to stay updated with the latest in cyber security you

Channel: zSecurity

Views: 276,424

Keywords: bypass, windows 10, windows, os x, mac os x, apple, hack, ethical hacking, hacking, bypass windows password, reset login password, reset password, hack windows, hack apple, hack os x, zsecurity, zaid sabih, usb, bootable

Id: SWNI1bd298c

Length: 11min 48sec (708 seconds)

Published: Thu Aug 27 2020