vadim-a-yegorov

FOR EDUCATIONAL PURPOSES ONLY!!!!!!!!!

 How to Bypass BIOS Passwords

BIOS passwords can add an extra layer of security for desktop and laptop computers. They are used to either prevent a user from changing the BIOS settings or to prevent the PC from booting without a password. Unfortunately, BIOS passwords can also be a liability if a user forgets their password, or changes the password to intentionally lock out the corporate IT department. Sending the unit back to the manufacturer to have the BIOS reset can be expensive and is usually not covered in the warranty. Never fear, all is not lost. There are a few known backdoors and other tricks of the trade that can be used to bypass or reset the BIOS

DISCLAIMER
This article is intended for IT Professionals and systems administrators with experience servicing computer hardware. It is not intended for home users, hackers, or computer thieves attempting to crack the password on a stolen PC. Please do not attempt any of these procedures if you are unfamiliar with

vadim-a-yegorov

How Linux boots

As it turns out, there isn't much to the boot process:

   1. A boot loader finds the kernel image on the disk, loads it into memory, and starts it.
   2. The kernel initializes the devices and its drivers.
   3. The kernel mounts the root filesystem.
   4. The kernel starts a program called init.
   5. init sets the rest of the processes in motion.
   6. The last processes that init starts as part of the boot sequence allow you to log in.

vadim-a-yegorov

roycewilliams / tychotithonus GitHub starred

https://gist.github.com/roycewilliams/b17feea61f39a96d75031930180ef6a6

Last updated: 2022-04-23

NOTE: gists sometimes disappear; also see commit history.

• https://github.com/003random/003Recon
• https://github.com/0vercl0k/CVE-2021-31166
• https://github.com/0vercl0k/clairvoyance
• https://github.com/0vercl0k/wtf
• https://github.com/0x09AL/RdpThief
• https://github.com/0x27/ssh_keyscanner

vadim-a-yegorov

Privilege Escalation

• https://github.com/sagishahar/lpeworkshop

APIs

• https://any-api.com/

Tools

• https://github.com/BishopFox/GitGot
• https://www.threatcrowd.org/
• https://snyk.io/

vadim-a-yegorov

console.log("[*] SSL Pinning Bypasses");
console.log(`[*] Your frida version: ${Frida.version}`);
console.log(`[*] Your script runtime: ${Script.runtime}`);

/**
 * by incogbyte
 * Common functions 
 * thx apkunpacker, NVISOsecurity, TheDauntless
 * Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
 * !!! THIS SCRIPT IS NOT A SILVER BULLET !!

vadim-a-yegorov

/**
 * Android, iOS (12.0-15.7.3), Linux universal SSLKEYLOG dumper.
 *
 * Usage:
 * 
 *   # For iOS and mac:
 *   rvictl -s [UDID]
 *   # Then open Wireshark and select rvi0
 * 
 *   # For iOS and not mac: