Bypass Windows & OS X Logins in seconds!

Hello everyone Zade from Zed Security, here and in today's video I will show you how to

bypass

the login screens in both Windows and OS X. Hit the Like button to show us your support and help the channel grow as you get to know more likes. we get more videos that we will make, subscribe to the channel and press the bell icon so that you will receive a notification every time we upload a video and come on, to do this, all we are going to need is a normal USB stick. I'll show you how to set it up later, but now let me show you how it will work.

All we'll have to do is connect this to the computer you want to

bypass

your login screen, restart the computer, and boot from there. You'll be able to log in with any password you want or sometimes even a blank password, so we'll start with the OS so like I said all I need to do is plug this into the computer running OS pressed the options key on the keyboard, as you can see, I have three options right now and the one I want to boot is the third one here, the efi boot, this is my USB stick that I just plugged in, we'll press enter, we'll press one to skip the

logins

for Mac OSX and we will use zero to log in with a blank or with an existing account and we will press any key to start this, wait for the system to boot and as you can see I am back to my home screen of I log in with all my users and they all have passwords, but notice that now when I click on my own user account, I can log in without entering a password and now I can do pretty much anything that the normal zabi user can do on their computer.

That's great, now let's see what we can do with a Windows computer, so I'm just going to change the hdmi port to my Windows computer and I'm going to unplug the USB stick and we'll connect it to the Windows computer and again, just like we did with OS X, we will restart this computer and enter its boot options by pressing F12. Now Let's move the selector down to select our USB stick that we just plugged in using the arrows and we'll press enter to boot from there and then we'll go to zero to skip Windows login and zero again to use default mode and we'll press . any key to continue we will give it some time and it should allow us to access any user we want without entering their password even if secure boot is enabled and this can even be used to bypass online accounts and now we can click on any user . to access without a password or with any password we want, but before we do that I want to show you this really cool additional feature that allows us to control this computer with an elevated user using the command prompt, so all we have to do even without Al log in, just press the Shift key a few times to activate the Windows sticky key feature and because we boot it from boot, we'll get this nice command prompt and if I do who am I, you'll see I'm. running as an elevated NT user and now I can do whatever I want on the system with high privileges and I can even add new users, enable remote desktop and connect remotely later so that's really cool.

Now let's close this and see if we really can. Log in to any user with any password or with a blank password. I will just set the password to number one and perfect as you can see we can log in to this user account by simply typing whatever password we want and now we can do whatever we want on this computer as you can see this can be useful in many scenarios if you're doing a normal penetration test and you walk into the company and you find unattended computers or you book an appointment with someone and you're talking to them and they leave their desk but they lock their computer and then you can access it this way and obviously , to take advantage of this you need to have your own backdoors also ready on a USB stick so you can run them directly. or you can use the command prompt like I showed you there to quickly add a user and then enable remote desktop and maybe later connect to the computer, so it's a good skill to have under your belt and obviously you can use it and use it.

In so many different scenarios now, as you know, the main thing we did in this video was to connect a USB stick to these computers, but what is on this USB stick and how can we log in to these computers without entering the password? technical and let me show you how to configure any USB stick so that you can use it this way and skip

logins

on both Windows and OSX, so I'm here on my Windows computer and first of all we need the program to flash on our stick USB or on our phone, which will do all the magic and allow us to skip the login screens, so the program is called with boot and you can download it from its official website with boot.com, you can get the version of Windows. the OS X version or the two-in-one version, which is what I have now, which allows us to bypass the Windows and OS Now, as you can see, this is not a free program, but I am giving away seven free licenses.

All you have to do is like the video, subscribe to the channel and fill out the form in the description, follow us on social media to see the winners and In two weeks before I publish my next video, I will choose seven winners and give them completely free licenses. If you go ahead and purchase the license, you will receive an email from this website with this program right here with a link that will allow you to download this program and with your username and password which we will need later, so once you have the program here, the next thing you need is a USB stick or a phone in which we will update this program and connect it to the computers. that we want to skip the logins right now, I already plugged in my diskless USB stick, you can see it here and right now it's empty, so that's okay because we're going to show you this and we're ready, so I'm going to run the wizard here, just double click on it.

I'm going to say yes, we'll accept the agreement and we'll install it in this location and right here you get a warning message telling you to unplug any USB. Storage devices other than the one you want to use, that's what I already have. I recommend that you use a storage device that has a capacity of less than 32 gigabytes and recommends using a well-known manufacturer such as Kingston Sans Disk, etc. So, everything is fine, we are going to click OK and as you can see, you will get a really nice wizard that is very easy to use to achieve our goal, so the first two options will allow us to start corn on a CD that don't have.

I don't want to do this, many computers don't even have CDs nowadays and it's hard to carry a CD with you; It is much more convenient to flash it on a phone or as a USB storage device, so we are going to use the usb option here, but first of all we will have to enter the username and password of our license. You will receive this in the same email that contains the download link for corn boot once you purchase it, so I'm going to put mine right now is zayd since it's security.org and then we put the password.

We're going to select the USB device that we want to flash this to, so in my case I want to flash it to this device, the only one that is connected to zero. sound disk device, we'll keep this in the classic formatting scheme and I'll check this box to also bypass secure boot. This only works with the commercial license which is a little more expensive and now that we're happy with everything I'm just going to click on install USB stick, now this is another warning that just tells you that your USB stick will be formatted and flashed the boot in it, so we're going to say yeah, okay and just go. to give it time to start the flash cone on the selected USB stick and perfect, as you can see it tells us that it is installed correctly, so now we can use this USB stick to bypass the login screens in both Windows and OS X and we will do it.

We will even be able to bypass secure boot, all we have to do is connect it to the target computer, reboot from there and once we get to the login screen we will enter the password we want and it will allow us to log in sometimes. I will even be able to log in with a blank password, as you can see it is not very difficult to set up this tool and as I said it is a really useful tool to have under your belt and can be used in many scenarios. There are actually several ways you can use to bypass login screens.

Many of them would require you to boot from a different OS and do some work manually and then reboot again and access this computer, so it may take some time and hence this. The tool can be very practical and very useful because all you have to do is just plug it in and then you will be able to log in, so it will save you a lot of time, especially if you keep in mind that when you do this, you will probably want to do it as quickly as possible because the actual computer user could return at any time.

Let me know what you think in the comments and don't forget to like this video and subscribe to the channel to stay. updated with the latest in cybersecurity