search

bacher09 / pwgen-for-bios

Password generator for BIOS
http://bios-pw.org/
GNU General Public License v3.0
1.11k stars 269 forks source link

Bios A23 #166

Open ams0 opened 2 years ago

ams0 commented 2 years ago

I am trying for months now to unlock a Dell E7250 with System Number D803M72-6FF1. The problem is that I have Bios version A23, which I can't find any reference online about. No password work, even replacing 6FF1 with BF97, and I can only get in the graphical BIOS interface, never on the black background one. Anyone is in the same boat as me?

K3YL0 commented 2 years ago

What passwords have you tried? What type of keyboard are you using?

ams0 commented 2 years ago

US keyboard. pNMIk1ky9Qr9MyrZ and 04GbCsFCV56Bf2Ds as reported from https://bios-pw.org/

K3YL0 commented 2 years ago

Make sure to pay attention to Zero "0" And Oh's "O" etc. And after entering password, Press CTRL+ENTER or CTRL+ENTER+ENTER. Are you able to set the BIOS to defaults? Maybe need to downgrade BIOS version?

ams0 commented 2 years ago

Yes, double checked the strings, and I can't downgrade, I need the admin password for that...Do I still have hopes you think?

K3YL0 commented 2 years ago

Yes, I do believe their is still hope! I will be taking a closer look at your issue later today. Hopefully someone else may help out as well. I have A LOT going on right now, Dealing with COVID and everything else life has thrown at me.

ams0 commented 2 years ago

Thank you for your time and I sincerely hope things get better for you and everyone.

K3YL0 commented 2 years ago

Any luck on your end yet? I wish I was their to physically run a USB boot disk on it to test some scripts! ฅ^•ﻌ•^ฅ

EDIT: Can you provide a BIOS dump?

ams0 commented 2 years ago

I’m happy to run those scripts for you and send you results. I’m an engineer and hacking since the tender age of 8 :)

K3YL0 commented 2 years ago

I'm not ready to release them to the "Wild" 🙃

bacher09 commented 2 years ago

Actually A23 is available on manufacturer website and from my quick glimpse it looks the same as code that available on the website, a bit latter I'll check more precisely.

bacher09 commented 2 years ago

Your password has to be 04GbCsFCV56Bf2Ds (that's what actually used in A23). You can actually check it yourself, with modern tooling you can just find block that executes password execute it with unicorn, also you can try qiling (which is wrapper over unicorn and makes few things easier).

ams0 commented 2 years ago

No luck :( I am 100% confident I'm typing the right password, it's US keyboard. I disconnected the CMOS battery too...

bacher09 commented 2 years ago

CMOS battery never helps on laptops, because password is usually saved in NVRAM. There might be some issues with keyboard (sometimes certain keys don't work, or register as wrong scan code in some cases certain key can be stuck, etc), try attaching external keyboard (and maybe even detaching onboard keyboard). Also, if you have SPI programmer, you could patch firmware to accept any password or even reset NVRAM.

ams0 commented 2 years ago

External keyboard tried, and failed. I might find an SPI programmer, any pointer to docs how to do it, would be extremely appreciated. Thanks!

K3YL0 commented 2 years ago

External keyboard tried, and failed. I might find an SPI programmer, any pointer to docs how to do it, would be extremely appreciated. Thanks!

This might get you going in the right direction! ฅ^•ﻌ•^ฅ https://jensd.be/980/linux/bios-or-spi-programming-on-windows-or-linux-using-a-ch341a