Penetration Testing: Re: Stealing Password from BIOS

[Tim <tim-pentest () sentinelchicken org>]

> A couple of years back I saw a tool illustrated at a conference that
> would pull the encoded password from BIOS. However, Google fails to show
> any such tool.
>
> Note that I am not trying to clear/reset the password. What I want to do
> is to recover a BIOS password during a pen-test so I can reboot the box
> at will without making any changes to the box.
>
> Any pointers greatly appreciated.

See:
  http://storm.net.nz/projects/16

While the project focuses on accessing memory over firewire, there's a
tool for extracting the BIOS keyboard buffer from RAM images that
should work with just about any RAM image.

HTH,
tim

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------