Penetration Testing mailing list archives
Re: Stealing Password from BIOS
From: Tim <tim-pentest () sentinelchicken org>
Date: Fri, 26 Jun 2009 09:39:41 -0700
A couple of years back I saw a tool illustrated at a conference that would pull the encoded password from BIOS. However, Google fails to show any such tool. Note that I am not trying to clear/reset the password. What I want to do is to recover a BIOS password during a pen-test so I can reboot the box at will without making any changes to the box. Any pointers greatly appreciated.
See: http://storm.net.nz/projects/16 While the project focuses on accessing memory over firewire, there's a tool for extracting the BIOS keyboard buffer from RAM images that should work with just about any RAM image. HTH, tim ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Stealing Password from BIOS Jon Kibler (Jun 26)
- Re: Stealing Password from BIOS Sandeep Cheema (Jun 26)
- Re: Stealing Password from BIOS Tim (Jun 26)
- Re: Stealing Password from BIOS Jerome Athias (Jun 26)
- RE: Stealing Password from BIOS Password Crackers, Inc. (Jun 26)
- Re: Stealing Password from BIOS Marcus Vinicius (Jun 29)