How to Crack BIOS Passwords

BIOS passwords can add an extra layer of security for desktop and laptop computers. They are used to either prevent a user from changing the BIOS settings or to prevent the PC from booting without a password. Unfortunately, BIOS passwords can also be a liability if a user forgets their password, or changes the password to intentionally lock out the corporate IT department. Sending the unit back to the manufacturer to have the BIOS reset can be expensive and is usually not covered in the warranty. Never fear, all is not lost. There are a few known backdoors and other tricks of the trade that can be used to bypass or reset the BIOS

DISCLAIMER
This article is intended for IT Professionals and systems administrators with experience servicing computer hardware. It is not intended for home users, h@ckers, or computer thieves attempting to cr@ck the password on a stolen PC. Please do not attempt any of these procedures if you are unfamiliar with computer hardware, and please use this information responsibly. LabMice.net is not responsible for the use or misuse of this material, including loss of data, damage to hardware, or personal injury.


Before attempting to bypass the BIOS password on a computer, please take a minute to contact the hardware manufacturer support staff directly and ask for their recommended methods of bypassing the BIOS security. In the event the manufacturer cannot (or will not) help you, there are a number of methods that can be used to bypass or reset the BIOS password yourself. They include:

Using a manufacturers backdoor password to access the BIOS

Use password cr@cking software

Reset the CMOS using the jumpers or solder beads.

Removing the CMOS battery for at least 10 minutes

Overloading the keyboard buffer

Using a professional service

Please remember that most BIOS passwords do not protect the hard drive, so if you need to recover the data, simply remove the hard drive and install it in an identical system, or configure it as a slave drive in an existing system. The exception to this are laptops, especially IBM Thinkpads, which silently lock the hard drive if the supervisor password is enabled. If the supervisor password is reset without resetting the and hard drive as well, you will be unable to access the data on the drive.


--------------------------------------------------------------------------------

Backdoor passwords

Many BIOS manufacturers have provided backdoor passwords that can be used to access the BIOS setup in the event you have lost your password. These passwords are case sensitive, so you may wish to try a variety of combinations. Keep in mind that the key associated to "_" in the US keyboard corresponds to "?" in some European keyboards. Laptops typically have better BIOS security than desktop systems, and we are not aware of any backdoor passwords that will work with name brand laptops.

WARNING: Some BIOS configurations will lock you out of the system completely if you type in an incorrect password more than 3 times. Read your manufacturers documentation for the BIOS setting before you begin typing in passwords

Award BIOS backdoor passwords:

ALFAROME ALLy aLLy aLLY ALLY aPAf _award AWARD_SW AWARD?SW AWARD SW AWARD PW AWKWARD awkward BIOSTAR CONCAT CONDO Condo d8on djonet HLT J64 J256 J262 j332 j322 KDD Lkwpeter LKWPETER PINT pint SER SKY_FOX SYXZ syxz shift + syxz TTPTHA ZAAADA ZBAAACA ZJAAADC 01322222
589589 589721 595595 598598

AMI BIOS backdoor passwords:

AMI AAAMMMIII BIOS PASSWORD HEWITT RAND AMI?SW AMI_SW LKWPETER A.M.I. CONDO

PHOENIX BIOS backdoor passwords:

phoenix, PHOENIX, CMOS, BIOS

MISC. COMMON PASSWORDS

ALFAROME BIOSTAR biostar biosstar CMOS cmos LKWPETER lkwpeter setup SETUP Syxz Wodj

OTHER BIOS PASSWORDS BY MANUFACTURER

Manufacturer Password
VOBIS & IBM merlin
Dell Dell
Biostar Biostar
Compaq Compaq
Enox xo11nE
Epox central
Freetech Posterie
IWill iwill
Jetway spooml
Packard Bell bell9
QDI QDI
Siemens SKY_FOX
TMC BIGO
Toshiba Toshiba

TOSHIBA BIOS

Most Toshiba laptops and some desktop systems will bypass the BIOS password if the left shift key is held down during boot

IBM APTIVA BIOS

Press both mouse buttons repeatedly during the boot


--------------------------------------------------------------------------------

Password cr@cking software

The following software can be used to either cr@ck or reset the BIOS on many chipsets. If your PC is locked with a BIOS administrator password that will not allow access to the floppy drive, these utilities may not work. Also, since these utilities do not come from the manufacturer, use them cautiously and at your own risk.

Cmos password recovery tools 3.1
!BIOS (get the how-to article)
RemPass
KILLCMOS

--------------------------------------------------------------------------------

Using the Motherboard "Clear CMOS" Jumper or Dipswitch settings

Many motherboards feature a set of jumpers or dipswitches that will clear the CMOS and wipe all of the custom settings including BIOS passwords. The sorrys of these jumpers / dipswitches will vary depending on the motherboard manufacturer and ideally you should always refer to the motherboard or computer manufacturers documentation. If the documentation is unavailable, the jumpers/dipswitches can sometimes be found along the edge of the motherboard, next to the CMOS battery, or near the processor. Some manufacturers may label the jumper / dipswitch CLEAR - CLEAR CMOS - CLR - CLRPWD - PASSWD - PASSWORD - PWD. On laptop computers, the dipswitches are usually found under the keyboard or within a compartment at the bottom of the laptop.
Please remember to unplug your PC and use a grounding strip before reaching into your PC and touching the motherboard. Once you locate and rest the jumper switches, turn the computer on and check if the password has been cleared. If it has, turn the computer off and return the jumpers or dipswitches to its original position.


--------------------------------------------------------------------------------

Removing the CMOS Battery

The CMOS settings on most systems are buffered by a small battery that is attached to the motherboard. (It looks like a small watch battery). If you unplug the PC and remove the battery for 10-15 minutes, the CMOS may reset itself and the password should be blank. (Along with any other machine specific settings, so be sure you are familiar with manually reconfiguring the BIOS settings before you do this.) Some manufacturers backup the power to the CMOS chipset by using a capacitor, so if your first attempt fails, leave the battery out (with the system unplugged) for at least 24 hours. Some batteries are actually soldered onto the motherboard making this task more difficult. Unsoldering the battery incorrectly may damage your motherboard and other components, so please don't attempt this if you are inexperienced. Another option may be to remove the CMOS chip from the motherboard for a period of time.
Note: Removing the battery to reset the CMOS will not work for all PC's, and almost all of the newer laptops store their BIOS passwords in a manner which does not require continuous power, so removing the CMOS battery may not work at all. IBM Thinkpad laptops lock the hard drive as well as the BIOS when the supervisor password is set. If you reset the BIOS password, but cannot reset the hard drive password, you may not be able to access the drive and it will remain locked, even if you place it in a new laptop. IBM Thinkpads have special jumper switches on the motherboard, and these should be used to reset the system.


--------------------------------------------------------------------------------

Overloading the KeyBoard Buffer

On some older computer systems, you can force the CMOS to enter its setup screen on boot by overloading the keyboard buffer. This can be done by booting with the keyboard or mouse unattached to the systems, or on some systems by hitting the ESC key over 100 times in rapid succession.


--------------------------------------------------------------------------------

Jumping the Solder Beads on the CMOS

It is also possible to reset the CMOS by connecting or "jumping" specific solder beads on the chipset. There are too many chipsets to do a breakdown of which points to jump on individual chipsets, and the sorry of these solder beads can vary by manufacturer, so please check your computer and motherboard documentation for details. This technique is not recommended for the inexperienced and should be only be used as a "last ditch" effort.

Unlock The Supersecret Administrator Account For Vista

Deep inside the bowels of Windows Vista, there’s a secret Administrator account, and it’s different from the normal administrator account you most likely have set up on your PC. This Administrator account is not part of the Administrator group. (Confused yet? You should be.) It’s a kind of superadministrator, akin to the root account in Unix, and by default it’s turned off and hidden. (In describing this tut, i’ll always use the capital “A” for the secret Administrator account, and a lowercase “a” for a normal administrator account.)

In versions of Windows before Windows Vista, the Administrator account wasn’t hidden, and many people used it as their main or only account. This Administrator account had full rights over the computer.

In Windows Vista, Microsoft changed that. In Vista, the Administrator account is not subject to UAC, but normal administrator accounts are. So the Administrator can make any changes to the system and will see no UAC prompts.

Turning on the Administrator account is straightforward. First, open command prompt by typing cmd into the run box on the Start menu, or by right-clicking the command prompt icon that appears at the top of the Start menu, then selecting Run as administrator.

Then enter this command and press Enter:

Net user administrator /active:yes

From now on, the Administrator account will appear as an option on the Welcome screen, along with any user accounts you may have set up. Use it like any other account. Be aware that it won’t have a password yet, so it’s a good idea to set a password for it.

If you want to disable the account and hide it, enter this command at an elevated command prompt and press Enter:

Net user administrator /active:no


ENJOY!!!!!!!!

ENABLE OR DISABLE USB PORT IN WINDOWS

Follow the steps to disable usb port in windowss
*Click Start, and then click Run.
*In the Open box, type regedit, and then click OK.
*Locate, and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
*In the right pane, double-click Start.
*In the Value data box, type 4, click Hexadecimal (if it is not already selected), and then click OK.
*Quit Registry Editor.

To re-enable
*Click Start, and then click Run.
*In the Open box, type regedit, and then click OK.
*Locate, and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
*In the right pane, double-click Start.
*In the Value data box, type 3, click Hexadecimal (if it is not already selected), and then click OK.
*Quit Registry Editor.

OR

start>>settings>>controlpannel>>system>>hardware>>devise manager>>look for the usb port in the list and select it then you can see an option disable or enable accordingly on the tool bar

Crash the Computer Easily

if u wnt to crash someones PC just try this
Open a notepad
Type the following
start rabi.dat
rabi.dat
save the file as rabi.dat
by using right click you can change icon
once the file is created if some one is going to click it
the system will crash

Enjoy..........

How to hide computer drives to secure data?

--------------------------------------------------------------------------------
This tip is very useful for home users, particularly for those who wants to hide/secure there important data from other users. You can hideany specific local drive or all drives (physical and removable) of the system and network drives also. By disabling the display of drives, youcan safe your personal data from non-technical users on a single computer.
Follow the given steps tochange the system drives registry value:
*.
To use this feature, you will need to be logged into your computer with
administrative rights.
*.
Click Start button and type regedit in Run option then press Enter for next.
*.
Here locate the sorryto:
· HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explo rer
· Here in right side panel, right click to create a new DWORD value
with name NoDrives (it iscase sensitive), then assign number
to its value data box.
· Now if you want to hide all system drives then modify value data
to 3FFFFFF .
· For specific drive use values (For example, for A, B, C, D, E, F, G,
H drives, the values are 1, 2, 4, 8, 16, 32, 64, and 128 respectively).
· In this case we are trying to hide F drive, so we modify the value data
box to 32.
· Now close the registry editor and restart your computer after any
changes to go into effect.
· But next time, if you want to unhide this drivethen simply change
the value data box or delete the DWORD item.
*.
Again close the registryeditor and restart your computer after any
changes to go into effect.

--------------------------------------------------------------------------------

Hack PayPal

Sell Subscriptions to Your Online Content Hack #61
Combine a database, PayPal subscriptions, and the IPN system to manage subscriber accounts.


If your web site offers something special that people are willing to pay for, such as access to a technical information database or specialized businessto- business commerce site, you might want to offer subscriptions. PayPal makes it easy. Using IPN, your web server, and your online database, you
can easily create an entirely automated system.


Many adult sites on the Internet are available on a subscription basis. Don’t offer subscriptions to these sorts of sites
with PayPal. Your site’s content must be allowed under Pay- Pal’s Acceptable Use Policy; otherwise, you might find that your account has been limited.


For the purposes of this example, let’s say you offer access to a Rhesus monkey marketing database for the low, low price of $30 per month. This opt-in database contains the monkey name, monkey age, aregiver name, and mailing address of over 10,000 monkeys across North America. You offer your subscribers, typically Rhesus monkey supply vendors, access to this information
for marketing purposes.


You’ll need four things to implement your subscription business model:


• A Subscribe button on your web site
• An online database that includes a subscribers table
• An IPN script to keep tabs on new, renewed, and expired subscriptions
• Dynamic pages that check a visitor’s status before allowing access


Creating a Subscribe Button


The Subscribe button for your site can come straight from PayPal’s button generator on the Merchant Tools page (log into PayPal and click the Merchant Tools tab). This example (created without encryption) should look familiar if you have created any unencrypted Buy Now or Donate Now buttons.


The variables a3, p3, and t3 set the amount, period, and time unit of the subscription, respectively:

Setting Up Your Database


Your access control database can be simple. A single table, shown in Table 6-1, containing the email address and the password of your subscriber is all you need. For this example, the table subscribers contains two alphanumeric fields: email and password. You could issue customer usernames to your subscribers, but you might be better served if you follow Pay- Pal’s example and use email addresses to identify users. Passwords can be stored as plain text.


Table 6-1. A database to keep track of your subscribers
ID email password
4005 shannon@paypalhacks.com sR3Du4#m77ca
4006 dave@paypalhacks.com go3@c23-dad43
4007 david@paypalhacks.com fae0v32c&ewf2




Processing Subscriber Notifications


You need to handle two kinds of notifications from PayPal: the addition of new subscribers to your database when they sign up and removal of subscribers whose subscriptions lapse or are cancelled. Here’s a snippet of ASP that does this (see the “Database Coding and Platform Choices” section of
the Preface for database considerations):





<% if Request.Form("txn_type") == "subscr_signup" then ' Add this subscriber to the database ' Use SQL like this: set cInsSubscr = Server.CreateObject("ADODB.Command") cInsSubscr.ActiveConnection = "DRIVER={Microsoft Access Driver (*.mdb)};DBQ="C:/InetPub/wwwroot/database/dbPayPal.mdb") cInsSubscr.CommandText = "INSERT INTO subscriber (email, password) VALUES ( '" & Request.Form("payer_email") & "', 'drowssap')" cInsSubscr.CommandType = 1 cInsSubscr.CommandTimeout = 0 cInsSubscr.Prepared = true cInsSubscr.Execute( ) ' Email the password to the new subscriber elsif Request.form("txn_type") == "subscr_cancel" then ' Remove a subscriber from the database ' Use SQL like this: set cDelSubscr = Server.CreateObject("ADODB.Command") cDelSubscr.ActiveConnection = "DRIVER={Microsoft Access Driver (*.mdb)};DBQ="C:/InetPub/wwwroot/database/dbPayPal.mdb") cDelSubscr.CommandText = "DELETE * FROM subscriber WHERE email = '" & Request.Form("payer_email") & "'" cDelSubscr.CommandType = 1 cDelSubscr.CommandTimeout = 0 cDelSubscr.Prepared = true cDelSubscr.Execute( ) end %>


Don’t really give every one of your subscribers the same password (drowssap in this example). Instead, use an algorithm for generating a password or let them choose a password for themselves in the subscription process. Don’t forget to turn on IPN in your PayPal account and point it at your IPN processing script .


Controlling Access to Your Valued Content
Now you have a list of valid subscribers that is automatically updated by PayPal and your IPN script. Next, you’ll need to make use of this information by ensuring that visitors to your site are on the current subscriber list.
In this example, all the members-only pages are dynamic ASP pages. The first thing the code does is check that the user is properly logged in. If not, the premium content is not displayed and the user is redirected to a Sign In page. You know the user is signed in if the magic cookie has been set.


<% 'content.asp 'Check for the magic cookie. 'If not found, redirect if Response.Cookies("MagicMonkey) != "swordfish" then Response.Print("Please log in before accessing this page.") Response.Redirect("login.asp") end %>



The Sign In page simply asks for the user’s email address and password. If this information shows the visitor is a valid subscriber, a cookie is set on the user’s browser. The cookie contains the magic word that allows your subscribers access. Without this cookie, set to the proper magic word, no one can access subscriber-only content.


<% 'Sign in page: sign_in.asp 'Database connection code goes here 'Connect to database and create recordset connStore = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ="C:/InetPub/wwwroot/database/dbPayPal.mdb") set rsCookies = Server.CreateObject("ADODB.Recordset") rsCookies.ActiveConnection = connStore rsCookies.Source = "SELECT * from subscribers WHERE email = '" & Request.Form("email") & "' AND password = '" & Request.Form("password") & "'" rsCookies.Open( ) 'IF the query turns up a match, execute this code: 'Set new cookie session in MagicMonkey ' "swordfish" happens to be today's magic cookie word Response.Cookies("MagicMonkey") = "swordfish" 'Set cookie expiration Response.Cookies("MagicMonkey").Expires = Now( ) + 1 'one day Response.Print("Thank you for logging in. Click
here to start selling stuff to a bunch of monkey lovers.")
'ELSE do this:
Response.Redirect("login.asp")
%>


Your page, login.asp, should contain an HTML form that asks for each customer’s email address and password. Its data is posted to sign_in.asp.

How to Place Windows Kernel into RAM

It’s a given that anything that runs in RAM will be faster than an item that has to access the hard drive and virtual memory. Rather than have the kernel that is the foundation of XP using the slower Paging Executive functions,
use this hack to create and set the DisablePagingExecutive DWORD to a value of 1.

Perform this hack only if the system has 256MB or more of
installed RAM!

Edit the Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\DisablePagingExecutive to 1 to disable paging and have the kernel run in RAM (set the value to 0 to undo this hack). Exit the Registry and reboot.

Enjoy!!!!!!!!!!!