3 ms·
Only for the record, until it lasted (seemingly noone has been interested in finding and updating the patterns to be patched or maybe some other security measur
by jaclaz 3y ago
Only for the record, until it lasted (seemingly noone has been interested in finding and updating the patterns to be patched or maybe some other security measure was implemented in later Windows 10) the "best" way (IMHO) was to patch a file.
Booting from USB with grub4dos, patching the .dll then continuing booting and you could login as the original user but without (or with "any") password:
http://reboot.pro/index.php?showtopic=18588 http://reboot.pro/index.php?showtopic=18588
There are (were) derivatives to be run from a WinPE, but any hex editor that could access the .dll would have done.
Let's say that it was a poor man's Konboot, that has (or at least used to have) a similar approach, but patching files in memory.
- guilamu 3y agoYou can do that easily today with medicat (and ventoy).
- jaclaz 3y agoYep, but medicat lists (among other tools) the PEPassPass (which is a derivative of PassPass), all those tools need to boot into an Operating System (a PE or a Linux), change something, then reboot to the "normal" OS. What is (was) elegant in the grub4dos PassPass is (was) that you booted to grub4dos, ran the batch and then continue booting to the "normal" OS.
- guilamu 3y agoIndeed, good point.