Kon-Boot sahifasining manbasini koʻrish

{{qisqa tavsif|Parolni chetlab o'tish dasturi}}
{{Infobox dasturi
| nomi = Kon-Boot
| logo =
| logo alt =
| skrinshot =
| sarlavha =
| skrinshot alt =
| yig'iladigan =
| ishlab chiquvchi = Piotr Bania
| chiqarilgan = {{Boshlanish sanasi va yoshi|2008|07|15}}
| to'xtatilgan =
| so'nggi versiya = 4.3
| oxirgi chiqish sanasi = {{Boshlanish sanasi va yoshi|2023|06|27|}}
| So'nggi ko'rib chiqish versiyasi =
| oxirgi ko'rib chiqish sanasi = <!-- {{Boshlanish sanasi va yoshi|YYYY|MM|KK|df=ha}} -->
| operatsion tizim = Windows va macOS tizimlari
| platforma =
| hajmi =
| veb-sayt = {{URL|https://www.piotrbania.com/all/kon-boot/}}
| standart =
| AsOf =
}}
'''Kon-Boot''' (aka ''konboot'', ''kon boot'') bu [[dasturiy ta'minot]] yordam dasturi bo'lib, u foydalanuvchilarga [[Microsoft Windows]] parollari va [[MacOS|Apple”ni chetlab o'tish imkonini beradi. macOS]] parollari ([[Linux]] qoʻllab-quvvatlashi eskirgan) amalga oshirilayotgan tizimda doimiy yoki doimiy oʻzgarishlarsiz. Bu, shuningdek, Windows 10 onlayn (jonli) parollarini chetlab o'tish va Windows va macOS tizimlarini qo'llab-quvvatlaydigan birinchi xabar qilingan vositadir.<ref name=":0">{{Cite web|url=https://www.piotrbania.com /all/kon-boot/|title=Rasmiy Kon-Boot vositasi veb-sayti (Windows paroli va macos parolini chetlab o'tish)|oxirgi=|birinchi=|date=|website=www.piotrbania.com|access-date=2019-07- 26}}</ref> Bu shuningdek, kompyuter xavfsizligida keng qoʻllaniladigan vositadir, ayniqsa [[Penetratsiya testi|kirish testi]].<ref>{{Cite web|url=https://blog.rapid7.com/ 2018/09/18/bu-bir martalik-qalam-test-qism-3-qanday-i-energiya-kompaniyasini-o'g'irlagan/|title=Penetratsion test hikoyalari: Energetika kompaniyasini qanday o'g'irlaganim| date=2018-09-18|website=Rapid7 Blog|language=en|access-date=2019-11-22}}</ref><ref>{{Kitobdan iqtibos|url=https://books.google. com/books?id=v7f4BEoAEAMC&q=%22kon-boot%22&pg=PA24|title=Qora san'atdan himoya: xakerlar o'z ishini qanday qilishadi va undan qanday himoyalanish mumkin|last1=Varsalone|first1=Jesse|last2=McFadden| first2=Matto|date=2011-09-07|nashriyot=CRC Press|isbn=978-1-4398-2119-0|til=en}}</ref><ref>{{Kitobdan iqtibos|url=https: //books.google.com/books?id=kQGGDwAAQBAJ&q=%22kon-boot%22&pg=PA166|title=Kengaytirilgan kirish testi uchun Kali Linuxni o'zlashtirish: Kali Linux 2019.1 bilan tarmog'ingizni himoyalang – oq shapkali xakerlar uchun eng yaxshi asboblar to'plami,3 Nashr|oxirgi1=Velu|birinchi1=Vijay Kumar|oxirgi2=Beggs|birinchi2=Robert|date=2019-01-30|nashriyot=Packt Publishing Ltd|isbn=978-1-78934-061-7|til=en}} </ref> 3.5 versiyasidan beri Kon-Boot SecureBoot funksiyasini ham chetlab o‘tishga qodir.<ref>{{Cite web|title=Windows Guide - KON-BOOT GUIDE - Unutilgan parollarni bartaraf etish (Windows va Mac)|url=https: //kon-boot.com/docs/windows_guide/#secure-boot-bypass|access-date=2020-11-03|website=kon-boot.com}}</ref>
[[Fayl:Kon-Boot boot process.jpg|thumb|Kon-Boot yuklash jarayoni]]

== Tarix ==
Kon-Boot dastlab kontseptsiyaning isboti, bepul xavfsizlik vositasi sifatida ishlab chiqilgan bo'lib, asosan parollarini unutishga moyil bo'lgan odamlar uchun mo'ljallangan. Asosiy g'oya foydalanuvchilarga to'g'ri parolni bilmasdan va u amalga oshirilayotgan tizimga doimiy o'zgarishlar kiritmasdan maqsadli kompyuterga kirishga ruxsat berish edi.

Birinchi Kon-Boot versiyasi 2008 yilda DailyDave pochta ro'yxatida e'lon qilingan.<ref>{{Cite web|url=https://seclists.org/dailydave/2008/q3/55|title=Dailydave: TOOL: Kon-Boot v .1.0 - yuklash vaqti yakuniy linux xakerlik yordam dasturi ; )|website=seclists.org|access-date=2019-07-26}}</ref> Versiya 1.0 (bepul) foydalanuvchilarga Linux-ga asoslangan operatsion tizimlarga kirish va autentifikatsiya jarayonini chetlab o'tish imkonini berdi (tizimga kirish huquqisiz) parolni bilish).

2009 yilda ushbu dastur muallifi Linux va 32-bitli Microsoft Windows tizimlari uchun Kon-Boot-ni e'lon qildi.<ref>{{Cite web|url=https://seclists.org/fulldisclosure/2009/Apr/155|title=Full Disclosure : Windows va Linux uchun KON-BOOT (Boshlarni unutish uchun parolni chetlab o'tish uchun yordamchi dastur)|website=seclists.org|access-date=2019-07-26}}</ref> Ushbu nashr har qanday kompyuterda Windows tizimlari parollarini chetlab o'tish uchun qo'shimcha yordam berdi. Windows operatsion tizimi Windows Server 2008 dan [[Windows 7]] gacha. Ushbu versiya hali ham bepul dastur sifatida mavjud<ref>{{Cite web|url=https://www.piotrbania.com/all/kon-boot/index2.html|title =[www.kon-boot.com] KON-BOOT - ULTIMATE WINDOWS/LINUX HACKING UTILITY :-)|website=www.piotrbania.com|access-date=2019-07-26}}</ref>

Eng yangi Kon-Boot relizlari faqat tijorat mahsulotlari sifatida mavjud<ref name=":0" /><ref>{{Cite web|url=https://kon-boot.com/|title=Kon-Boot - Eng yaxshi parol windows paroli, mac paroli, unutilgan parollar, windows 10 paroli|website=kon-boot.com|language=en|access-date=2019-07-26}}</ref> uchun vosita va hali ham saqlanib qolmoqda.


Joriy versiya quyidagi operatsion tizimlarda parollarni chetlab o'tishga qodir:
{| class="wikitable"
|+
!Qo'llab-quvvatlanadigan Microsoft Windows operatsion tizimlari<ref>{{Cite web|url=https://kon-boot.com/docs/windows_guide/#system-requirements|title=KON-BOOT GUIDE|website=kon-boot.com| access-date=2021-11-12}}</ref>
|-
|Microsoft Windows XP
|-
|Microsoft Windows Vista Home Basic 32Bit/64Bit
|-
|Microsoft Windows Vista Home Premium 32Bit/64Bit
Microsoft Windows Vista Home Premium 32Bit/64Bit
|-
|Microsoft Windows Vista Business 32Bit/64Bit
|-
|Microsoft Windows Vista Enterprise 32Bit/64Bit
|-
|Microsoft Windows Server 2003 Standard 32Bit/64Bit
|-
|Microsoft Windows Server 2003 Datacenter 32Bit/64Bit
|-
|Microsoft Windows Server 2003 Enterprise 32Bit/64Bit
|-
|Microsoft Windows Server 2003 Web Edition 32Bit/64Bit
|-
|Microsoft Windows Server 2008 Standard 32Bit/64Bit
|-
|Microsoft Windows Server 2008 Datacenter 32Bit/64Bit
|-
|Microsoft Windows Server 2008 Enterprise 32Bit/64Bit
|-
|Microsoft Windows 7 Home Premium 32Bit/64Bit
|-
|Microsoft Windows 7 Professional 32Bit/64Bit
|-
|Microsoft Windows 7 Ultimate 32Bit/64Bit
|-
|Microsoft Windows 8 va 8.1 barcha versiyalari (32Bit/64Bit -- jonli/onlayn parolni chetlab o'tishni o'z ichiga oladi)
|-
|Microsoft Windows 10 barcha versiyalari (32Bit/64Bit -- jonli/onlayn parolni chetlab o'tishni o'z ichiga oladi)
|-
|Microsoft Windows 11 barcha versiyalari (64Bit, UEFI - Windows 11 o'rnatish talablari)
|}
{| class="wikitable"
|+
!Qo'llab-quvvatlanadigan Apple macOS / OS X operatsion tizimlari<ref>{{Cite web|url=https://kon-boot.com/docs/osx_guide/#system-requirements|title=KON-BOOT GUIDE|website=kon-boot .com|access-date=2019-07-26}}</ref>
|-
|Apple OS X 10.6
|-
|Apple OS X 10.7
|-
|Apple OS X 10.8
|-
|Apple OS X 10.9
|-
|Apple OS X 10.10
|-
|Apple OS X 10.11
|-
|Apple macOS Sierra (10.12)
|-
|Apple macOS High Sierra (10.13)
|-
|Apple macOS Mojave (10.14)
|-
|Apple macOS Catalina (10.15)
|-
|Apple macOS Big Sur (11)
|-
|Apple macOS Monterey (12) <ref>{{Cite web|url=https://www.piotrbania.com/all/kon-boot/|title=Developer veb-sayti|website=www.piotrbania.com|access-date =2021-11-12}}</ref>
|-
|Apple macOS Ventura (13)
|}
== Technology ==
Kon-Boot works like a bootkit<ref>{{Cite journal|last=Moabi.com|date=2012-07-29|title=[Defcon] Hardware backdooring is practical|url=https://www.slideshare.net/endrazine/defcon-hardware-backdooring-is-practical}}</ref><ref>{{Cite web|url=https://www.cert-ist.com/public/en/SO_detail?code=bootkits&format=html|title=Computer Emergency Response Team - Industrie Services et Tertiaire|website=www.cert-ist.com|access-date=2019-08-22}}</ref> (thus it also often creates false positive<ref>{{Citation|title=VirusTotal tackles the tricky false positives problem plaguing antivirus software|url=https://www.pcworld.com/article/2883692/virustotal-tackles-false-positive-malware-detections-plaguing-antivirus-and-software-vendors.html}}</ref><ref>{{Cite web|url=https://www.pcmag.com/article/333640/false-positives-sink-antivirus-ratings|title=False Positives Sink Antivirus Ratings|last1=Rubenking|first1=By Neil J.|date=April 15, 2015|website=PCMag|language=en|access-date=2019-08-26}}</ref><ref>{{Cite web|url=https://www.pandasecurity.com/mediacenter/security/false-positives-what-are-they/|title=False positives - What are they?|date=2010-09-08|website=Panda Security Mediacenter|language=en-US|access-date=2019-11-22}}</ref> alerts in antivirus software). It injects (hides) itself into [[BIOS]] memory. Kon-Boot modifies the kernel code on the fly (runtime), temporarily changing the code responsible for verification user's authorization data while the operating system loads. 

In contrast to password reset tools like [[Chntpw|CHNTPW]] (The Offline NT Password Editor), Kon-Boot does not modify system files and [[Security Account Manager|SAM hive]],<ref>{{Cite web|url=https://social.technet.microsoft.com/wiki/contents/articles/11925.security-accounts-manager.aspx|title=Security Accounts Manager - TechNet Articles - United States (English) - TechNet Wiki|website=social.technet.microsoft.com|access-date=2019-10-01}}</ref> all changes are temporary and they disappear after system reboots.

== Additional Features ==
While by default Kon-Boot bypasses Windows passwords it also includes some additional features that are worth noting:

* Kon-Boot can change Windows passwords due to embedded Sticky-Keys<ref>{{Cite web|title=In Windows, what are Sticky Keys, and how do I enable them?|url=https://kb.iu.edu/d/aaez|access-date=2021-06-24|website=kb.iu.edu|arxivsana=2021-06-24|arxivurl=https://web.archive.org/web/20210624202310/https://kb.iu.edu/d/aaez}}</ref> feature. For example after successful Windows boot with Kon-Boot user can tap SHIFT key 5 times and Kon-Boot will open a Windows console window running with local system privileges.  Fully working console can be used for a [[variety]] of purposes. For example in case of changing Windows password following command can be used:<ref>{{Cite web|title=Windows Guide - KON-BOOT GUIDE - Remedy for forgotten passwords (Windows and Mac)|url=https://kon-boot.com/docs/windows_guide/#how-to-change-profile-password-using-console|access-date=2021-06-24|website=kon-boot.com}}</ref> <code>net user [username] [newpassword]</code>(selected user can be later added as new Windows administrator by typing: <code>net localgroup administrators [username] /add</code>). Similarly following command:<ref>{{Cite web|last=M|first=John|date=2021-03-26|title=How to Reset Your Forgotten Windows 10 Password|url=https://howto.thelead82.com/guide/how-to-reset-your-forgotten-windows10-password|access-date=2021-06-24|website=Solution to Windows and Mac password problems|language=en-US}}</ref>  <code>net user [username] *</code> will erase current Windows password for selected user.  Obviously many other actions are available since the Windows console is running with system privileges. 
* [[File:Kon-Boot with Automatic Powershell Script Execution feature.png|alt=Kon-Boot automatically executing Powershell script with system privileges|thumb|Kon-Boot automatically executing PowerShell script with system privileges]]In the commercial Kon-Boot editions it is possible to use Automatic PowerShell Script Execution feature <ref>{{Cite web|title=Windows Guide - KON-BOOT GUIDE - Remedy for forgotten passwords (Windows and Mac)|url=https://kon-boot.com/docs/windows_guide/#automatic-powershell-script-execution-feature|access-date=2021-06-24|website=kon-boot.com}}</ref> which automatically executes (after Windows boot) given [[PowerShell]] script with full system privileges. This feature can be used to automatize various tasks for example performing forensics data gathering task etc. To use this feature Windows needs to be installed in UEFI mode.   

== Limitations (prevention) ==
Users concerned about tools like Kon-Boot should use disk encryption<ref>{{Cite web|url=https://www.techopedia.com/definition/13623/full-disk-encryption-fde|title=What is Full-Disk Encryption? - Definition from Techopedia|website=Techopedia.com|language=en|access-date=2019-08-23}}</ref> ([[FileVault]], [[BitLocker|Bitlocker]], [[VeraCrypt|Veracrypt]] etc.) software as Kon-Boot is not able to bypass disk encryption.<ref>{{Cite web|url=https://kon-boot.com/docs/faq/#how-can-i-protect-against-kon-boot|title=KON-BOOT GUIDE|website=kon-boot.com|access-date=2019-07-26}}</ref> BIOS password and enabled [[Secureboot|SecureBoot]]<ref>{{Citation|title=What is UEFI Secure Boot|url=https://docs.fedoraproject.org/en-US/Fedora/18/html/UEFI_Secure_Boot_Guide/chap-UEFI_Secure_Boot_Guide-What_is_Secure_Boot.html|access-date=2023-09-17|arxiv-sana=2022-04-12|arxiv-url=https://web.archive.org/web/20220412010525/https://docs.fedoraproject.org/en-US/Fedora/18/html/UEFI_Secure_Boot_Guide/chap-UEFI_Secure_Boot_Guide-What_is_Secure_Boot.html|url-status=dead}}</ref><ref>{{Cite web|url=https://www.intel.com/content/www/us/en/support/articles/000006942/boards-and-kits/desktop-boards.html|title=Frequently Asked Questions about Secure Boot|website=Intel|language=en|access-date=2019-08-26}}</ref> feature is also a good prevention measure. However Kon-Boot since version 3.5 is able to bypass [[Secureboot|SecureBoot]] feature.<ref>{{Cite web|title=KON-BOOT OFFICIAL GUIDE - Remedy for forgotten passwords for Windows and Mac! Can't login? Use kon boot password software|url=https://kon-boot.com/docs/windows_guide/#secure-boot-bypass|access-date=2020-06-15|website=kon-boot.com}}</ref> Kon-Boot does not support virtualization and instructs users to turn it off in the bios.<ref>{{Cite web|title=Bypass Windows password with Kon-Boot (GUIDE) - KON-BOOT GUIDE - Remedy for forgotten passwords (Windows and Mac)|url=https://kon-boot.com/docs/windows_guide/#disable-virtualization-support-in-bios|access-date=2021-08-27|website=kon-boot.com}}</ref> Kon-Boot does not support ARM devices such as Apple's M1 chip.

== References ==
{{reflist}}

== External links ==
* [https://www.piotrbania.com/all/kon-boot/ Official website]

[[Category:Password cracking software]]