igzTroll Posted October 29, 2013 Share Posted October 29, 2013 Hey guys, I am new to the forum (I apologize if this isn't the right location for this) and new to the rubber ducky, but I was wondering if there might be a payload for windows that would either bypass windows login, or edit the sam hives that the password is stored in. Any advice is appreciated, thanks! Quote Link to comment Share on other sites More sharing options...
no42 Posted October 29, 2013 Share Posted October 29, 2013 There is no real war to bypass the windows login with USB, but you could try a simple brute force with the Ducky, and you might get lucky? There is no way to edit the sam hives while the OS is running, as these files are locked. Quote Link to comment Share on other sites More sharing options...
igzTroll Posted October 29, 2013 Author Share Posted October 29, 2013 Would a brute force work while locked out? and if so do you have any recommendations for script? Is this something that would just be easier to google? lol.. again thanks for any info. Quote Link to comment Share on other sites More sharing options...
igzTroll Posted October 29, 2013 Author Share Posted October 29, 2013 I know how to manually remove it from outside the OS I just didn't know if there might be a slick trick that would be faster. Quote Link to comment Share on other sites More sharing options...
mreidiv Posted October 29, 2013 Share Posted October 29, 2013 (edited) you can load up a linux distro find the oskb.exe rename it to oskb.bak and rename cmd to oksb.exe so that win the login screen pops up you can click the accessibility functions then click the onscreen keyboard and it will bring up an administrator command prompt then use the netuser command. Here is a link same concept just different file http://www.prime-expert.com/articles/a03/bypassing-windows-logon-screen-and-running-cmd-exe-with-system-privileges.php Edited October 30, 2013 by mreidiv Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.