Project X3: Breaking a BIOS Password (15 pts.)

What You Need

Warning

About half the students that try have difficulty with this project because the VMs close instantly and they cannot capture the images. I have not been able to find any pattern--some machines do that and others do not. If it happens to you, you can either try using a different machine or capture a video of the action. You can then either turn in the video, or capture stills from the video.

Increasing the BIOS Boot Delay

Click Start, Computer.

Navigate to the folder your virtual machine is in.

Find the virtual machine file with a .vmx file extension. It will help to click Organize, "Folder and Search Options", click the View tab, and clear the "Hide file extensions..." box.

Open the .vmx file in Notepad and add this line to the end of it:

bios.bootdelay = 5000
Save the file.

Assigning a BIOS Password

Start your virtual machine.

When text appears in the virtual machine, click the mouse inside it and then press the F2 key.

When the "PhoenixBIOS Setup Utility" screen appears, use the keyboard arrow keys to select the Security menu. Press Enter to "Set Supervisor Password".

Enter a BIOS password of 12345678 in both boxes, as shown below.

Use the Enter key to move from one box to the other.

After entering the password in both fields, press Enter.

A "Setup Notice" box appears saying "Changes have been saved.". Press Enter again.

Your BIOS screen should now show that the "Supervisor Password" is "Set", as shown below.

Press F10 and then Enter to save changes.

When the VM restarts, from the VMware Player menu bar, click Player, Power, "Power Off"

Entering the Wrong Password Three Times

Start your virtual machine again, click on it, and press F2 to enter the BIOS.

A blue box asks you to "Enter Password". Enter something wrong, like X, and press Enter. Repeat the process three times.

A "System Disabled" box appears, as shown below, with a code number visible.

Saving the Screen Image

Make sure the shows the "System Disabled" box, with the code number visible. If the box closes instantly, you will need to use a different machine or capture a video.

Save a full-desktop imavge with a filename of "Proj X3a from YOUR NAME".

Downloading the BIOS Keygen

Open a Web browser and go to http://dogber1.blogspot.com/2009/05/table-of-reverse-engineered-bios.html

In the "Phoenix (generic)" line, click the "Windows binary" link.

Save the file on your desktop.

On your desktop, right-click the pwgen-5dec.zip file and click "Extract All...". Click Extract.

Using the Keygen

A box pops up showing a pwgen-5dec.exe file. Double-click that file.

If a warning box pops up, click Run.

A command prompt window opens. Click in that box and enter the number from your "System Disabled" message.

It finds a series of passwords. Notice that the passwords you get are not the same ones I got, and don't include the password you entered--but they will probably still work.

Saving the Screen Image

Make sure your screen shows the "Generic Phoenix BIOS" line, with a generated password visible that is different from the example above.

Save a full-desktop imavge with a filename of "Proj X3b from YOUR NAME".

Testing the Generated Password

Restart your virtual machine, click and press F2 to enter the BIOS.

A blue box asks you to "Enter Password". Enter the password from the "Generic Phoenix BIOS" line in the keygen--when I did it, it was fqhrzg If the password works, you will see the BIOS open. If it fails, run the keygen again. Every time you run it, it finds different passwords, and they don't all work. But it worked for me two out of three times.

Setting a Boot Password

In the Security menu, press the down-arrow to select the "Password on boot" item. Press Enter to select it.

A blue box pops up. Press the down-arrow key to highlight Enabled and press Enter.

Your BIOS screen should now show that the "Password on boot" is "Enabled", as shown below.

Press F10 and then Enter to save changes.

Entering the Wrong Password Three Times

A blue box asks you to "Enter Password". Enter something wrong, like X, and press Enter. Repeat the process three times.

A "System Disabled" box appears, as shown below, but this time the code number is 00000.

Saving the Screen Image

Make sure your screen shows the "System Disabled" box, with a number of 00000. If the box closes instantly, you will need to use a different machine or capture a video.

Save a full-desktop image with a filename of "Proj X3c from YOUR NAME".

Using the Keygen

Run the keygen and enter the code of 00000. It generates a password.

Testing the Generated Password

Press Ctrl+Alt to release the keyboard from the VM.

Restart your virtual machine, click and press F2 to enter the BIOS.

A blue box asks you to "Enter Password". Enter the password from the "Generic Phoenix BIOS" line in the keygen. It won't work--obviously 00000 is not the real code. This keygen works for BIOS passwords, but not for boot passwords.

Clearing the Passwords

Restart your virtual machine, click and press F2 to enter the BIOS.

A blue box asks you to "Enter Password". Enter the password you chose originally: 12345678

Use the arrow keys to get to the Security page. Highlight "Password on Boot" and press Enter. Use the arrow keys to highlight Disabled and press Enter.

In the Security menu, set the "Password on boot" to Disabled.

Use the arrow keys to highlight "Set Supervisor Password" and press Enter.

In the blue "Set Supervisor Password" box, enter 12345678 in the first line. Press Enter four times.

Your BIOS screen should now show that both passwords are Clear, as shown below.

Press F10 and then Enter to save changes.

Turning In Your Project

Email the images to cnit.121@gmail.com with a subject of "Project X3 from YOUR NAME".


Last modified: 5-13-14 12:46 pm