Session 9 OS LOGIN BYPASS

OS LOGIN BYPASS
================
Nowadays everyone use OS login on there Machine and as our Victims's. THese steps will tell you on the basis of scenario's that how to enter and crack into a particular operating system.


Types Of Passwords
===================

1. Power On Password : These are the authentication used before booting up the system and starts on when we press the power button.

2. BIOS / Supervisor Password : BIOS authentication occurs when we boot up our operating system and before our OS is ready.

3. OS Passwords : These Passwords are nowadays mostly used and cracked by the attackers.


METHODS OF OS LOGIN BYPASS
===========================

1. Online Method : This method carries out when the Operating Machine of the Victim is running and active. We crack the password or create a new user while not knowing the current password.

SAM
===
SAM stands for Security Accounts Manager is file in Windows Operating System which carries all the users passwords in that but encrypted.

C:\Windows\System32\SAM

LOCAL GROUP POLICY USER EDITOR
==============================
It is a console given by Microsoft which helps in accessing all the users account configuration in Windows Operating Systems.

STEPS
=====

= My Computer > Right Click > Manage
= Local Group and Users > Right Click > Create New User
= Enter entities of new user

THROUGH CMD
===========

= CMD > net user
= CMD > net user username *
= Restart


Alternative of saving from Online Method :

SYSKEY
======
It is a technology which enables a level of authentication and encrypts your SAM file by 128 bit encryption of RC4.


2. OFFLINE METHOD
==================
This is the scenario where the Machine of a Victim is already locked and we don't know the password. WE access the machine through some Third Party tools such as Hiren Boot or Kon Boot etc.

LIVE OPERATING SYSTEMS
======================
Normally OS loads from internal storage which is located inside your Machine only. Live Operating Systems are those which are installed ore placed in some kind of external storage like cd, dvd, usb etc.

Requirements
============
== Boot a USB with some Bootable Softwares like Rufus and installing Kon Boot or Hiren Boot in that.
== Plugging the USB Drive into the Victim's Machine for getting the access of the machine.

https://www.youtube.com/watch?v=rtkTTTRz3s8


-------------------------------------------------------------------------------------------------------------------------------------------------

Bypassing Login of Kali Linux :

Linux :Bypassing Kali Linux Password
Step 1: Select Recovery MODe Press E
Step 2: Change ro to rw and add init=/bin/bash at the end of line and Press F10
Step 3: Reset password by typing passwd root and press enter
Step 4: Type new password and restart the system

------------------------------------------------------------------------------------------------------------------------------------------------------

Bypassing Ubuntu System Password :

Step 1: Go to Safe mode
Step 2: Recover Mode
Step 3: Select the second last option from the list i.e SHELL
Step 4: type passwd root
Step 6: Give the new password and confirm password and restart the machine.
Step 7: Fill the new password


https://www.youtube.com/watch?v=oH4prJA0lhU