Kon-Boot

**Kon-Boot** (aka *konboot*, *kon boot*) bu dasturiy ta'minot yordam dasturi bo'lib, u foydalanuvchilarga Microsoft Windows parollari va Apple”ni chetlab o'tish imkonini beradi. macOS parollari (Linux qoʻllab-quvvatlashi eskirgan) amalga oshirilayotgan tizimda doimiy yoki doimiy oʻzgarishlarsiz. Bu, shuningdek, Windows 10 onlayn (jonli) parollarini chetlab o'tish va Windows va macOS tizimlarini qo'llab-quvvatlaydigan birinchi xabar qilingan vositadir. Bu shuningdek, kompyuter xavfsizligida keng qoʻllaniladigan vositadir, ayniqsa kirish testi. 3.5 versiyasidan beri Kon-Boot SecureBoot funksiyasini ham chetlab o‘tishga qodir.

## Tarix
Kon-Boot dastlab kontseptsiyaning isboti, bepul xavfsizlik vositasi sifatida ishlab chiqilgan bo'lib, asosan parollarini unutishga moyil bo'lgan odamlar uchun mo'ljallangan. Asosiy g'oya foydalanuvchilarga to'g'ri parolni bilmasdan va u amalga oshirilayotgan tizimga doimiy o'zgarishlar kiritmasdan maqsadli kompyuterga kirishga ruxsat berish edi.

Birinchi Kon-Boot versiyasi 2008 yilda DailyDave pochta ro'yxatida e'lon qilingan. Versiya 1.0 (bepul) foydalanuvchilarga Linux-ga asoslangan operatsion tizimlarga kirish va autentifikatsiya jarayonini chetlab o'tish imkonini berdi (tizimga kirish huquqisiz) parolni bilish).

2009 yilda ushbu dastur muallifi Linux va 32-bitli Microsoft Windows tizimlari uchun Kon-Boot-ni e'lon qildi. Ushbu nashr har qanday kompyuterda Windows tizimlari parollarini chetlab o'tish uchun qo'shimcha yordam berdi. Windows operatsion tizimi Windows Server 2008 dan Windows 7 gacha. Ushbu versiya hali ham bepul dastur sifatida mavjud

Eng yangi Kon-Boot relizlari faqat tijorat mahsulotlari sifatida mavjud uchun vosita va hali ham saqlanib qolmoqda.

Joriy versiya quyidagi operatsion tizimlarda parollarni chetlab o'tishga qodir:

## Technology
Kon-Boot works like a bootkit (thus it also often creates false positive alerts in antivirus software). It injects (hides) itself into BIOS memory. Kon-Boot modifies the kernel code on the fly (runtime), temporarily changing the code responsible for verification user's authorization data while the operating system loads. 

In contrast to password reset tools like CHNTPW (The Offline NT Password Editor), Kon-Boot does not modify system files and SAM hive, all changes are temporary and they disappear after system reboots.

## Additional Features
While by default Kon-Boot bypasses Windows passwords it also includes some additional features that are worth noting:

* Kon-Boot can change Windows passwords due to embedded Sticky-Keys feature. For example after successful Windows boot with Kon-Boot user can tap SHIFT key 5 times and Kon-Boot will open a Windows console window running with local system privileges.  Fully working console can be used for a variety of purposes. For example in case of changing Windows password following command can be used: `net user [username] [newpassword]`(selected user can be later added as new Windows administrator by typing: `net localgroup administrators [username] /add`). Similarly following command:  `net user [username] *` will erase current Windows password for selected user.  Obviously many other actions are available since the Windows console is running with system privileges. 
* In the commercial Kon-Boot editions it is possible to use Automatic PowerShell Script Execution feature  which automatically executes (after Windows boot) given PowerShell script with full system privileges. This feature can be used to automatize various tasks for example performing forensics data gathering task etc. To use this feature Windows needs to be installed in UEFI mode.   

## Limitations (prevention)
Users concerned about tools like Kon-Boot should use disk encryption (FileVault, Bitlocker, Veracrypt etc.) software as Kon-Boot is not able to bypass disk encryption. BIOS password and enabled SecureBoot feature is also a good prevention measure. However Kon-Boot since version 3.5 is able to bypass SecureBoot feature. Kon-Boot does not support virtualization and instructs users to turn it off in the bios. Kon-Boot does not support ARM devices such as Apple's M1 chip.

## References

## External links
* Official website