How to Bypass Locked Windows Computers to Run Kali Linux from a Live USB « Null Byte :: WonderHowTo

It's easy to runKali Linuxfrom a live USB on nearly any available computer, but many publicly accessible laptops and desktops will be locked down to prevent such use. School, work, or library PCs can be secured with a BIOS password, which is often an easily recovered default password. Once you have access, though, you can use a USB flash drive to run Kali live on any PC you find.Running Kali Linux on Computers via USBWith a Kali live USB stick, you can run a hacking OS on any machine you can plug into, meaning you don't have to dedicate your personal computer or a portion of it for your hacking adventures, nor do you need to buy a PC just to use Kali with. A live USB allows the resources of the computer to be used to boot from the thumb drive, ignoring the hard drive the computer usually boots from.Image by Kody/Null ByteWhen running Kali from a USB stick, there are two different ways of doing so. One is persistent, meaning changes that you make are saved to the flash drive. The other is non-persistent, where no changes are saved any anything you do is lost when you exit the session.If you don't need to store files or remember settings you've changed, you can simply run the installation in live mode and enjoy the benefits of a fresh system every time you start. If persistence is a necessary feature, you can take the extra steps needed to make your installation persistent.More Info:How to Create Bootable USB with Persistence for Kali LinuxUsing a Kali Live USB Stick on Any Windows PCWhile computers can be found almost everywhere nowadays, it's rare to find one for public use that isn't protected in some way. Most school and work computers have layers of defenses, usually requiring a login, and some features deemed risky could be disabled. An example of one of these features is changing the boot order in the BIOS menu to allow booting from a USB stick.The BIOS, or Basic Input/Output System, is the configuration menu which can be run at the beginning of booting a computer. This system runs before the operating system and does things like tells the computer which input device to search first for an operating system to boot from.If the BIOS is unlocked, changing the boot order to have the computer attempt to boot from USB first takes only a few seconds with the on-screen menu, which can usually be accessed by pressingF2while starting the computer.However, as mentioned before, most publicly accessible computers will have a BIOS password set. This password, sometimes called an administrator password, will be required to switch the boot order, making it much harder for the average user to run Kali on a computer they have access to. If the BIOS password is set to a strong password, it can be extremely difficult to modify the system in any meaningful way.Don't Miss:How to Run Kali Linux as a Windows SubsystemFortunately for a hacker, many PCs simply use a default password on the BIOS, which can be derived easily from the serial number. This allows a hacker to bypass the BIOS password to change the boot order to allow Kali Linux to run on the system. We'll explore how this works, so you can determine if a computer is using a default BIOS password and bypass it.What You'll Need to Get StartedTo try this attack, you'll need to use a computer that has a version ofWindowsrunning on it. The boot system ofmacOSdoesn't use a BIOS-type interface, so you won't be able to execute this kind of attack against a Linux or macOS device.Once you have a test computer, you'll need to create a bootable USB image of Kali Linux. You'll need aUSB stick with at least 16 GB of spaceon it, althoughmoreis advised if you want a persistent installation which allows you to save files or data.Recommended on Amazon:Samsung 128 GB Metal USB 3.0 Flash Drive for Around $35Step 1: Download Kali Linux for a Live InstallTo begin, download Kali Linux fromkali.org/downloads, taking care to download the appropriate version for the computer you're going to be using. Generally, the 64-bit version should be fine.Step 2: Burn a Kali Live Installation to a USB DriveOnce this file has been downloaded, you'll need to burn it to a USB flash drive using Etcher (download). This free, cross-platform program can turn the Kali image into a bootable USB stick. Make sure there are no files on the thumb drive you are using because it will be erased in the process.Insert the USB drive into your computer, then open Etcher. Inside Etcher, you'll need to supply two pieces of information: the image to write and the drive to write the image to. For the option on the far left, select the Kali image you downloaded, then hit "Select drive" to choose your thumb drive. Make sure you're selecting the correct drive because after you click the "Flash" button, the selected drive will be erased.Click "Flash," and the process will begin, first burning the data to the drive, and then verifying the burned image. When this is done, you can safely eject the drive.Step 3: Reboot the Target Computer to Access the BIOSNow that the USB stick is ready, booting into Kali is fairly simple if you're able to access the boot order settings. First, you'll need to identify the key to press when you reboot the computer which accesses the BIOS menu. My HP computer allows access to this menu by hittingEsc, but for many other desktop PCs, the key isF2.Common Keys for Newer PCs:

F1
F2
F10
Del
Esc

Notes:

- If you try F2 and see a diagnostics tool,
    the BIOS key is likely F10.
- If the boot menu opens for F10, it's
    likely F2.If you're unsure what keyboard command it is for your computer, you can Google it or simply watch the screen when your computer starts, as it often will say which key to press in order to enter the startup menu, as seen below.Press <F2> to enter BIOS setupFrom within the BIOS system, you'll need to look for the "boot order" or "boot menu." When you've located this, you'll need to change the order that the computer looks for devices to boot from. If there is no password, this is the step in which you can simply change the boot order so that the USB drive comes before the hard drive, and you're done!Unfortunately, many computers will have an administrator password set here, preventing you from changing the setting. In that case, jump to the next step to start the process of bypassing it.Step 4: Recover the Default PasswordAfter getting a prompt stating that a password is needed to change the boot order, it should include the serial number, which can be used to figure out the password.On your smartphone or another computer, you'll need to navigate to a website that generates BIOS default passwords such asClear unknown BIOS passwords. Copy down the serial number you got from the BIOS menu, then enter it into the website tool and hit "Get password" (or a similar button) to generate a default password.Some manufacturers supported by the website are as follows:Asus:                   Current BIOS date. For example: 01-02-2013
Compaq:                 5 decimal digits (e.g., 12345)
Dell:                   Supports such series: 595B, D35B, 2A7B, A95B, 1D3B, 6FF1, and 1F66. (e.g., 1234567-2A7B or 1234567890A-D35B for HDD)
Fujitsu-Siemens:        5 decimal digits, 8 hexadecimal digits, 5x4 hexadecimal digits, 5x4 decimal digits
Hewlett-Packard:        5 decimal digits, 10 characters
Insyde H20 (Acer, HP):  8 decimal digits
Phoenix (generic):      5 decimal digits
Sony:                   7-digit serial number
Samsung:                12 hexadecimal digitsAfter you enter your code, you'll see several codes to try. You can type these in one by one to see if any of them work. If you're trying this on a Dell computer, you'll need to pressCtrlandEnterat the same time to get the default password to work.Step 5: Bypass Authentication & Change the Boot OrderNow that you have the default BIOS password, you can access the entire BIOS menu. This gives you full access to the hardware settings of the computer, and you can do pretty much whatever you want at this point. To start, you can disable the BIOS password, set a new admin password, or do things like apply firmware updates.In this case, you probably won't need to do any of this. Attempting to change the boot order should give you a password prompt, and once you supply the default password, you should be able to switch the boot order to make the "USB" option first, as seen above in Step 3.Don't Miss:Fully Anonymize Kali with Tor, Whonix & PIA VPNIf this doesn't work, you can also navigate to the security settings and attempt to log in there. Once you supply the default password, you can proceed to either disable or change it, allowing you to proceed to the boot order settings and change it to run USB first.Step 6: Boot Kali Linux from USBNow that you've bypassed the BIOS password and changed the boot order, insert the Kali live USB stick, and reboot the computer. The first place the computer should now look is the USB port for a system to boot from, but in the future, if there is no bootable system plugged into the USB drive, it will just proceed to boot from the hard drive as usual.Once the system starts, you will be taken to the Kali setup screen. Here, you'll be able to pick which version of Kali you want to run on the system. You can select a live version, which will not save any data to the disk, or a persistent version, which will allow you to save files and settings to the disk.Image by Kody/Null ByteYou can also choose to install Kali Linux permanently onto the system, which will allow you to select part of the hard disk of the host computer and install Kali Linux onto it. This may change the way the computer boots, so it's not a very subtle option.Don't Miss:How to Compile a New Hacking Tool in KaliOnce you decide which to run, select it to begin booting into the system. Once you see the login prompt, typerootas the username andtooras the password to log into the desktop for the first time. And now that you're logged in, you're free to run an update, change the default password, and get started using Kali Linux!Have Questions on Any of This?I hope you enjoyed this guide to bypassing BIOS passwords to free any Windows PC to use Kali Linux from a portable flash drive! If you have any questions about this tutorial or running Kali from a live USB stick, feel free to leave a comment below or reach me on Twitter@KodyKinzie.Don't Miss:How to Install Kali Linux as a Virtual Machine on a MacFollow Null Byte onTwitter,Flipboard, andYouTubeFollow WonderHowTo onFacebook,Twitter,Pinterest, andFlipboardWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover photo and screenshots by Kody/Null ByteRelatedHow To:Create Bootable USB with Persistence for Kali LinuxHow To:Kali Is Your New Pet; The Ultimate Guide About Kali Linux Portability.How To:Modify the USB Rubber Ducky with Custom FirmwareHow To:Log into Your Raspberry Pi Using a USB-to-TTL Serial CableHow To:Install Kali Live on a USB Drive (With Persistence, Optional)How To:Recover Passwords for Windows PCs Using OphcrackHow To:Scan for Viruses in Windows Using a Linux Live CD/USBHow To:Run Windows from Inside LinuxNews:Flaw in the Latest Linux Graphical Server Allows Passwordless LoginsHow To:Install Linux to a Thumb DriveHow To:Avoid Root Password Reset on Kali Live USB Persistence Boot