Forget your boot password and don't know how to use a third party? Please take a look.

Objective:

In some cases, user passwords created by themselves or others have been forgotten and cannot access the corresponding account. The blog focuses on how to crack passwords through Windows's own loopholes (swapping sticky keys with the command prompt to change passwords) in addition to using WinPE in this case.

1. First run VMware workstation14 and Win10 virtual environment

2. Secondly, the following points need to be prepared in advance.

Make sure that the Administrator account is not disabled (if you need to turn it off as shown in the following figure)

How to close it: right-click Administator to select the attribute, and remove the hook of "account has been disabled", as shown below:

3. Enter "loginoff" in cmd and select restart in the lower right corner after logout is completed and press Shift for a long time

4. Press Shift until you enter the following interface, select "troubleshooting", then select "Advanced options", then select "Command prompt", and finally select the Administrator administrator account, and enter the corresponding password to enter the command prompt.

5. Enter "diskpart" in the command prompt interface to display disk partition properties, and "list volume" to display volume partition, as shown in the figure

6. After entering EXIT to exit, enter c:, cd windows\ system32, as shown in the figure:

7. To facilitate the exchange of the command prompt with the sticky key

The first step is to type "copy cmd.exe cmd1.exe" to copy the execution file of the command prompt into a cmd1

The second step is to change the execution file name of the sticky key by entering "ren sethc.exe any name .exe".

Step 3 then type "ren cmd1.exe sethc.exe" to rename the copied cmd1

In the fourth step, enter "shutdown-r" to restart, as shown in the figure:

8. After reboot, press Shift 5 times in the interface to enter the password to bring up the sticky key (now it should be a command prompt)

As shown in the picture

9. Type "net user" under the cmd interface to find the user on this computer, and then enter "net user needs to change the password of the user name new password" as shown in the figure

10. Enter the new password under the corresponding account and successfully enter the system!