Forked from CHEF-KOCH/Windows 8 - 10 Password reset
Created
September 28, 2017 12:13
-
-
Save BertMueller18/7027fcaef6728c8bd8bf37e593b78d0b to your computer and use it in GitHub Desktop.
Windows 8 - 10 Password reset
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Research: | |
| http://www.pcworld.com/article/249181/how_to_reset_your_windows_password.html | |
| http://piotrbania.com/all/kon-boot/ | |
| http://cdslow.org.ru/en/ntpwedit/ | |
| http://theoven.org/index.php?topic=1103.0 | |
| https://pogostick.net/~pnh/ntpasswd/ | |
| http://reboot.pro/topic/18588-passpass-bypass-the-password/page-14 | |
| http://www.top-password.com/reset-windows-password.html#compare |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Requirments: | |
| WinPE or a second Account on the System that is Admin | |
| WinPE: | |
| If WinPE then you need to start RegEdit and mount the SAM hive (C:\windows\system32\config\SAM). | |
| If second Account you need RunAsSystem or DevxExec and run RegEdit with it or you take ownership of the Keys which i don't recommend though. | |
| HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\Names | |
| Select the Name you want to convert and look at the Default Value it will say something like 0x3F5 | |
| HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\ | |
| Select the 000003F5 Key (Choose the one that has the same numbers as you just saw) | |
| Delete the following Values but be sure to keep "V" and "F", Important that you do not delete "V" and "F" | |
| InternetUserName | |
| InternetProviderGUID | |
| InternetUID | |
| InternetSID | |
| CachedLogonInfo | |
| These are removable ^^ ! | |
| Select the "V" Key | |
| Go to 00A8 in key "V", select the 5th Byte and change it to 00 | |
| (see first screenshot) | |
| Create a "ForcePasswordReset" DWORD Value and set it to 1, now you get Asked to change your Password when you login, but you don't have to type any password, just click ok. | |
| (see second screenshot). | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment