Kon Boot Help Guide

Kon Boot Help Guide

www.kryptoslogic.com

Kon Boot Help Guide

Table of Content
1. Getting started
1.1 Introduction...................................................................................................... page2 1.2 Content............................................................................................................. page3 1.3 Systemrequirements.......................................................................................page4 1.4 KonBootCompatibility..................................................................................... page5 1.5 Howitworks.....................................................................................................page6

2. Installing Kon Boot

2.1 HowtomakeaKonBootUSBflashdrive......................................................... page7 2.2 HowtomakeaKonBootCD..............................................................................page8

3. Using Kon Boot

3.1 Insertingandenablingmedia...........................................................................page9 3.2 KonBootLogon ............................................................................................... page11 . 3.3 Privilegeescalation..........................................................................................page12 3.4 UsingKonBootwithVmWare........................................................................ page14 3.5 Resettingpasswordsandaddingaccounts..................................................... page19

4. Kon Boot FAQ ................................................................................................page30

www.kryptoslogic.com

Kon Boot Help Guide

1.1

Introduction

ThankyouforchoosingKonBoot.t KonBootisanapplicationwhichwillbypasstheauthenticationprocessofWindowsbased operatingsystems. KonBootcanworkonaUSBflashdrive,CD,orfloppydiskette. UsingKonBootissimple.Firstloadittoyourdesiredmedia(CD,USBdrive,or floppydiskette)theninsertitintothetargetcomputer,andstartitup!

www.kryptoslogic.com

Kon Boot Help Guide

1.2

Content

Filename
konFLOPPY.img konCD.iso

Description
Floppy&USBimagefileofKonBoot ISOimageofKonBoot InstallguideforkonCD.iso InstallguideforkonUSB FrontendforUSBinstallation DrivemappinginstructionforGrub FormatsUSBdiskwithgrubMBR GRUBforDOSuniversalbootloader GPLv3Licenseforgrubfiles

KonBootCDInstallGuide.pdf KonBootUSBGuide.pdf KonBootInstall.exe menu.lst

grubinst.exe grldr COPYING

www.kryptoslogic.com

Kon Boot Help Guide

1.3

System requirements

Recommended Minimum Hardware:

IntelPentiumIIIprocessor(orcompatible)128MBRAMorgreater OperatingSystems: MicrosoftWindowsXPHomeEdition(ServicePack2+) MicrosoftWindowsVistaHomeBasic(32/64bit) MicrosoftWindowsVistaHomePremium(32/64bit) MicrosoftWindowsVistaBusiness(32/64bit) MicrosoftWindowsVistaEnterprise(32/64bit) MicrosoftWindows7HomePremium(32/64Bit) MicrosoftWindows7Professional(32/64Bit) MicrosoftWindows7Ultimate(32/64Bit) MicrosoftWindowsServer2003Standard(32/64bit) MicrosoftWindowsServer2003Datacenter(32/64bit) MicrosoftWindowsServer2003Enterprise(32/64bit) MicrosoftWindowsServer2003WebEdition(32/64bit) MicrosoftWindowsServer2008Standard(32/64bit) MicrosoftWindowsServer2008Datacenter(32/64bit) MicrosoftWindowsServer2008Enterprise(32/64bit)

Technology Requires:
10MBfreespaceontheharddrive.CD-ROM(forinstallationoftheprogramfromCD)or FloppyDriveorUSBflashdrive;computermouse;keyboard;Internetconnection(forproduct download);

www.kryptoslogic.com

Kon Boot Help Guide

1.4

Kon Boot Compatibility

Kon Boot will work with the following operating systems.

MicrosoftWindowsXPHomeEdition(ServicePack2+) MicrosoftWindowsVistaHomeBasic(32/64bit) MicrosoftWindowsVistaHomePremium(32/64bit) MicrosoftWindowsVistaBusiness(32/64bit) MicrosoftWindowsVistaEnterprise(32/64bit) MicrosoftWindows7HomePremium(32/64Bit) MicrosoftWindows7Professional(32/64Bit) MicrosoftWindows7Ultimate(32/64Bit) MicrosoftWindowsServer2003Standard(32/64bit) MicrosoftWindowsServer2003Datacenter(32/64bit) MicrosoftWindowsServer2003Enterprise(32/64bit) MicrosoftWindowsServer2003WebEdition(32/64bit) MicrosoftWindowsServer2008Standard(32/64bit) MicrosoftWindowsServer2008Datacenter(32/64bit) MicrosoftWindowsServer2008Enterprise(32/64bit)

Hardware:
IntelPentiumIIIprocessor(orcompatible)andgreater *KonBootmaynotworkonallPCsduetodifferentmotherboardBIOSissues.

www.kryptoslogic.com

Kon Boot Help Guide

1.5

How it works

KonBootbootsfromexternalmediasuchasfloppy,CD,orUSBremovabledrives. WhenaPCrunningWindowsisstartedwithKonBoot,theBIOSofthePCwillthenbe hookedbyKonBoot. AfterhookingtheBIOS,KonBootwillmodifytheWindowskerneltoallowausertobypass thestepofWindowsauthenticationprocedureduringWindowsLogon. ThechangesmadetotheWindowskernelaretemporaryonly.RebootingthePCwillrestore thefunctionalityoftheWindowskernelanditscorrespondingauthenticationprocedures.

www.kryptoslogic.com

Kon Boot Help Guide

2.1

How to make a Kon Boot USB flash drive

LocateKonBootInstallutilityinthefollowingdirectory: KonBootv1.1\KONUSB\KonBootInstall.exe

InsertaUSBthumborflashdriveintoyourPC RunKonBootInstall.exe Please note:OnWindowsVistaornewer,youwillneedtorightclickontheexecutable andRunasAdministrator Installationiscomplete!

SeeKonBootUSBGuide.pdfforadditionalhelp.

www.kryptoslogic.com

Kon Boot Help Guide

2.2 How to make a Kon Boot CD

LocatekonCD.isointhefollowingdirectory: KonBootv1.1\KONCD\konCD.iso

InsertablankrecordableCDintoyourCD-RW/DVD-RWdrive LaunchyourpreferredCDBurningapplication Findandselectburnimage/isooption Installationiscomplete!

SeeKonBootUSBGuide.pdfforadditionalhelp.

www.kryptoslogic.com

Kon Boot Help Guide

3.1

Inserting and enabling media

PoweronthetargetPCtouseKonBooton.

EntertheBIOSofthePC.Thisprocedurevariesdependingonthemodelofyourcomputer.CommonkeystoentertheBIOSduringstartupare:F1,F2,DEL,F12.TheBIOS generallywillindicatetheletterkeyneededtoentertheBIOSduringtheinitialseconds ofpoweringonthePC.

SetthefirstBootDeviceorBootPrioritytoCDROMifyouareusingKonBootCD.If youareusingaUSBremovabledrive(flashdrive),settheBootDeviceorBoot PrioritytoUSB-HDDortheUSBdeviceifgiven.Thisprocedurealsovariesdependingon themodelofthePC.Generally,thebootdeviceprioritycanbefoundinAdvanced PeripheralssectionoftheBIOS. Please note:IfyouareusingaUSBhubwithmultipleUSBdevices,ensureyouhaveselected thecorrespondingdeviceintheBIOSaswellastheparticularhubentry.

www.kryptoslogic.com

Kon Boot Help Guide

Example: BIOS of a PC

Consultyourmotherboardmanualforspecificinstructions. IftheBIOSonyourmotherboardwillnotsupporttheUSBbootoption,wesuggestusing KonBootCDorFloppy.

www.kryptoslogic.com

10

Kon Boot Help Guide

3.2 Kon Boot Logon

AfterKonBootscreenhasexecutedandWindowsreachesthelogonscreen,simplyselect yourdesiredusernameandloginwithoutanypasswordpresent. Thepasswordwillbebypassed. Iftheusernamefieldisblank,itmustbetypedinmanually. TypicaldefaultusernamesareGuestandAdministrator.

Please note: KonBootwillnotworkonnetworkdomainsunlesstheusernameiscachedlocally.

www.kryptoslogic.com

11

Kon Boot Help Guide

3.3 Privilege escalation

Logtoanyuseraccount Runstartexecutecmd.exe Incmd.exe:copyc:\windows\system32\cmd.execmk.exe incmd.exe:cmk incmd.exe:whoami(youshouldhaveSYSTEMrights)

Example: cmd.exe with the commands above

www.kryptoslogic.com

12

Kon Boot Help Guide

To delete cmk.exe from the system

ExitcmkbytypingExit Executethecommanddelcmk.exe cmkisnowremoved

www.kryptoslogic.com

13

Kon Boot Help Guide

3.4 Using Kon Boot with VmWare

DoubleclickyourCD/DVD(IDE)device.

www.kryptoslogic.com

14

Kon Boot Help Guide

DoubleclickyourCD/DVD(IDE)device.

EnableConnectatpoweronandbrowsetheUseISOimagefileoptiontokonCD.iso ClickOK.

www.kryptoslogic.com

15

Kon Boot Help Guide

PresstheF2keyduringVMwareBIOSscreen

www.kryptoslogic.com

16

Kon Boot Help Guide

SetthefirstdrivetoCD-ROMDrive. Exitandsaveyourchanges.

www.kryptoslogic.com

17

Kon Boot Help Guide

KonBootisnowenabledforVMWare.

www.kryptoslogic.com

18

Kon Boot Help Guide

3.5 Resetting passwords and adding accounts

StartcomputerwithKonBoot. LogontoWindowsandchooseanyaccount.Inthisexample,weuseGuest.

NavigatetheStartMenutoControlPanel

www.kryptoslogic.com

19

Kon Boot Help Guide

SelectUserAccountsandFamilySafety

www.kryptoslogic.com

20

Kon Boot Help Guide

ClickYesandleavethepasswordfieldempty

www.kryptoslogic.com

21

Kon Boot Help Guide

SelectCreateanewaccount

www.kryptoslogic.com

22

Kon Boot Help Guide

Createtheaccountandsetthepermissions. DisconnectKonBootandrestartthecomputertorestoreoriginalWindows authenticationfunctionality.

www.kryptoslogic.com

23

Kon Boot Help Guide

SelectyournewUserAccount.InthisexamplewechooseAudit

www.kryptoslogic.com

24

Kon Boot Help Guide

NavigatetheStartMenutoControlPanel

www.kryptoslogic.com

25

Kon Boot Help Guide

SelectUserAccountsandFamilySafety

www.kryptoslogic.com

26

Kon Boot Help Guide

SelectthetargetUserAccount

www.kryptoslogic.com

27

Kon Boot Help Guide

SelectChangethepassword

www.kryptoslogic.com

28

Kon Boot Help Guide

InputthenewinformationfortheaccountandclickChangepassword

www.kryptoslogic.com

29

Kon Boot Help Guide

4.

Kon Boot FAQ

Q. What does Kon Boot do? A.KonBootwillallowausertobypasstheauthenticationprocessonWindows basedsystems.Thepasswordisnotoverwrittenormodified,itisbypassed.

Q. How does Kon Boot work? A.KonBootwillhooktheBIOSduringstartup.OnceKonBoothasloadeditselftomemory, itwillmodifytheWindowsOSkernelsothatloginauthenticationisnotrequired.

Q. Are there any permanent changes to my computer when I use Kon Boot? A.Allchangesmadetotheoperatingsystemaretemporaryandwill berestoredwhenthecomputerisrebooted.Nopermanentchangesaremade.

Q. My antivirus detects Kon Boot as a virus, does Kon Boot contain malicious code? A.No.DuetothebehaviorofKonBootwiththecomputersBIOS,KonBootmaybeincorrectlyflaggedasabootvirus.However,KonBootdoesnotcontainanymaliciouscodeorvirus replicationfeatures,nordoesitcollectanyinformation.ThesoleinstructionofKonBootis tomodifytheWindowskernelsothatitmaybypassloginauthenticationforthepurposeof disasterrecovery,auditing,forgottonpasswords,orpenetrationtesting.Wedosuggest disablingyourantiviruswhencreatingaKonBootCD,Floppy,orUSBflashdrive.

www.kryptoslogic.com

30

Kon Boot Help Guide

Q. Does Kon Boot work on domain controllers? A.KonBootwillnotbypassauthenticationofdomaincontrollers.Thereareinstanceswhere aclientcomputerwilllocallycacheadomainlogin,andKonBootmaywork.

Q. Can Kon Boot bypass hard drive encryption? A.No.KonBootwillonlybypassauthenticationofWindowsbasedlocalpasswords.

Q. Can I read Windows EFS encrypted folders using Kon Boot? A.KonBootwillnotallowencryptedfolderaccess.Innocaseshouldyouresetorchangeyour passwordwithaWindowsEFSbasedloginusingKonBoot(oranyothertool).Thepassword andtheencryptionkeyarebinded,andchangingthepasswordofaWindowsEFSloginwill requiretheoriginalpasswordtoberesetbeforeEFSfolderscanbeaccessedagainvialogin.

Q. Kon Boot gives an error related to BIOS. Whats wrong? A.ItislikelythattheBIOSmemoryistoosmallforKonBoottorun,andthereforeKonBoot isnotcompatiblewiththisparticularcomputer.

www.kryptoslogic.com

31

Kon Boot Help Guide

Q. How do I protect my computer so Kon Boot does not work on it? A.WerecommendharddriveencryptionusingtoolssuchasTrueCryptorPGP. DisablingCDROMandUSBbootwhilepasswordprotectingyourBIOSisalsohelpful. KryptosLogicwillalsoreleaseaBIOSprotector,whichwillpreventanytool,including KonBoot,frombooting.

Q. Kon Boot USB does not work for me? A.VariousBIOSandcomputerconfigurationsmaybeincompatiblewithcertain USBflashdrives.Additionally,certainBIOSconfigurationsandKonBootareincompatible. IfyouhaveaninstancewhichKonBootwillnotrun,pleasesubmittheBIOSversionand computermodeltoKryptosLogic.Wewilltrytofixitforournextrelease!

Q. Can I make any suggestions or comments about Kon Boot? A. [email protected]

Q. Are copies of Kon Boot on P2P and sites other than KryptosLogic.com safe? A. DonotuseunauthorizedcopiesofKonBoot.KonBootshouldbepurchasedonlyfrom verified sources, such as KryptosLogic.com. Versions obtained outside of our distribution channelsmaycontainvirusinfections,malware,orsimplybedamaged.Theseversionsare not trusted, safe, or supported. Furthermore,we do not support unauthorizedversions of KonBoot.

www.kryptoslogic.com

32