Buzz
A straightforward, step-by-step tutorial on accessing a PC or Mac without needing a password
Key Points to Remember
- To hack into a Windows PC, you'll require booting from a Windows installation DVD or USB drive.
- If the Mac you're targeting runs an unpatched version of High Sierra, you can log into the root user account without a password.
- For other macOS versions, leverage the DaveGrohl exploit to uncover the password of any user on a Mac.
Procedure
Windows
Understanding the Constraints
Ensure You Have Installation Media Ready
Insert Your Installation Media
Initiate a Restart to Access BIOS Settings.Commence
Electricity
Reboot- Your BIOS access key may vary depending on your motherboard manufacturer, but common keys include function keys (e.g., F2), the Esc key, and the Del key.
- If you're unsure which key to press or hold, refer to your computer's BIOS documentation by searching for your computer's model, the term 'bios', and the term 'key'.
Adjust Boot Priority for Installation Media Change your computer's boot order to prioritize the installation media. Access the Boot or Advanced tab in your BIOS, select your CD or USB drive, and use the + key to move it to the top of the list. If you encounter any BIOS issues, refer to the documentation online.
Save Settings and Exit Press the designated 'Save and Exit' key as per your BIOS instructions, then confirm if prompted. Your computer will restart, and you should see the installation menu appear.
Access Command Prompt Use ⇧ Shift+F10 to open Command Prompt.
Swap Utility Manager with Command Prompt Perform the following steps to enable access to Command Prompt later:
- Type move c:\windows\system32\utilman.exe c:\windows\system32\utilman.exe.bak and press ↵ Enter.
- Type copy c:\windows\system32\cmd.exe c:\windows\system32\utilman.exe and press ↵ Enter.
Restart Your Computer Enter wpeutil reboot, press ↵ Enter, and remove the installation media. This ensures Windows boots to the login screen rather than the setup menu. If using a CD, eject it before rebooting.
Access Command Prompt through Utility Manager. Click on the 'Utility Manager' icon, resembling a dial with a right-facing arrow. As you've substituted Utility Manager with Command Prompt, this action will launch Command Prompt in administrator mode.
Add a new user. Follow these steps to create a new administrator account:
- Type net user name /add, ensuring to replace 'name' with your desired username.
- Press ↵ Enter.
- Type net localgroup administrators name /add, replacing 'name' with the new user's name.
- Press ↵ Enter.
Perform another system reboot.Power
Restart
Sign in using your newly created user account. After Windows completes its restart, you can log in with the account you just made:
- Choose your new user's name from the bottom-left corner of the screen.
- Click Sign In.
- Allow Windows to finish configuring your new user profile.
Access your user's files.
⊞ Win+E
Reset the password for a local account.Initiate the process.
- Input control panel and select Control Panel from the top menu.
- Navigate to the User Accounts section.
- If necessary, click on User Accounts again to access the account settings.
- Choose Manage another account.
- Pick the desired account.
- Select Change the password.
- Enter and confirm the new password.
- Click on Change password.
Mac
Utilize the macOS High Sierra exploit. Some versions of macOS High Sierra have a vulnerability allowing access to the root account without a password or additional software. Follow these steps:
- Access the login screen.
- Replace the current username with root.
- Click on the password field (do not enter anything).
- Repeatedly press ⏎ Return until logged in.
Wait for user login. If the macOS High Sierra exploit fails, patience is required until the target user logs in. Hacking a Mac demands administrator privileges, which necessitate the user's initial login.
Acquire DaveGrohl. DaveGrohl serves to uncover the login password for your targeted Mac:
- Visit https://github.com/octomagon/davegrohl.
- Click the green Clone or download button.
- Select Download ZIP.
Unpack DaveGrohl. Simply double-click the downloaded ZIP file, then patiently await the DaveGrohl folder to unveil itself.
Copy the DaveGrohl directory. Close the unpacked DaveGrohl folder, click on it again, and hit ⌘ Command+⌥ Option+C to copy the folder's path to your Mac's clipboard.
Initiate Terminal.Spotlight
terminal
Terminal
Navigate to the DaveGrohl folder. Input cd, then hit the spacebar and ⌘ Command+V to paste the DaveGrohl folder's path. This ensures Terminal directs commands to the correct location.
Initiate password cracking. Follow these steps:
- Enter sudo ./dave -u username, replacing 'username' with the administrator username.
- Press ⏎ Return.
Retrieve the password. Once DaveGrohl finds the password, it'll be displayed under the 'Found password :' heading in the Terminal results. This is the password you'll utilize alongside the Mac's admin account.
- If you only need the password for future use, you're essentially finished now.
Access System Preferences…. It's located at the top of the dropdown menu, opening the System Preferences window.
Access Users & Groups. Navigate to this section in the System Preferences to open the Users & Groups menu.
Unlock the menu. Locate and click the padlock icon positioned at the bottom-left corner. Then, input the administrator username (if you used the High Sierra exploit, enter root) and the password (click the 'Password' field once and then leave it blank for the root account) and press ⏎ Return to unlock.
Choose an account. Click on the name of the individual whose password you wish to modify situated on the left side of the window.
Click Reset Password…. Look for this button positioned near the top of the menu.
Set a new password. Input your desired password into the 'New password' field, then re-enter it in the 'Verify' field.
Click on Change Password. It's located at the bottom part of the pop-up window. This action will modify the user's password.
Helpful Tips
-
If you intend to change a Microsoft account password, you must do it through the Microsoft Outlook login page.
Important Warnings
- Unauthorized access to a password-protected computer account is illegal and may result in penalties such as fines or imprisonment, particularly if performed on school, work, or any computer without proper authorization.
