ArticleslgStudy

computer science

Kon-Boot

Kon-Boot is a computer science topic covered in the lgStudy science library. This page brings together a partial reference excerpt, illustrations, worked examples, real-world applications and a short study plan, so you can understand Kon-Boot rather than just read about it. In short: Kon-Boot (aka konboot, kon boot) is a software utility that allows users to bypass Microsoft Windows passwords and Apple macOS passwords (Linux support has been deprecated) without lasting or persistent changes to system on which it is executed. It is also the first reported tool and so far the only one capable of bypassing Windows 11 and Windows 10 online (live) passwords and supporting both Windows and macOS syste…

Kon-Boot — main illustration
Kon-Boot — illustration

Key takeaways

  • Kon-Boot belongs to computer science; place it in that map before memorising details.
  • Learn the definition first, then one example that makes the definition concrete.
  • Connect Kon-Boot to a quantity you can measure, compute or draw — that is where exam questions come from.
  • Reproduce the core statement of Kon-Boot from memory before moving on to harder problems.

Reference excerpt

Kon-Boot (aka konboot, kon boot) is a software utility that allows users to bypass Microsoft Windows passwords and Apple macOS passwords (Linux support has been deprecated) without lasting or persistent changes to system on which it is executed. It is also the first reported tool and so far the only one capable of bypassing Windows 11 and Windows 10 online (live) passwords and supporting both Windows and macOS systems. It is also a widely used tool in computer security, especially in penetration testing. Since version 3.5 Kon-Boot is also able to bypass SecureBoot feature.

History Kon-Boot was originally designed as a proof of concept, freeware security tool, mostly for people who tend to forget their passwords. The main idea was to allow users to login to the target computer without knowing the correct password and without making any persistent changes to system on which it is executed. First Kon-Boot release was announced in 2008 on DailyDave mailing list. Version 1.0 (freeware) allowed users to login into Linux based operating systems and to bypass the authentication process (allowing access to the system without knowing the password). In 2009 author of this software announced Kon-Boot for Linux and 32-bit Microsoft Windows systems. This release provided additional support for bypassing Windows systems passwords on any Windows operating system starting from Windows Server 2008 to Windows 7. This version is still available as freeware Newest Kon-Boot releases are available only as commercial products and are still maintained. Current version is able to bypass passwords on the following operating systems:

Technology Kon-Boot works like a bootkit (thus it also often creates false positive alerts in antivirus software). It injects (hides) itself into BIOS memory. Kon-Boot modifies the kernel code on the fly (runtime), temporarily changing the code responsible for verification user's authorization data while the operating system loads. In contrast to password reset tools like CHNTPW (The Offline NT Password Editor), Kon-Boot does not modify system files and SAM hive, all changes are temporary and they disappear after system reboots.

Additional Features While by default Kon-Boot bypasses Windows passwords it also includes some additional features that are worth noting:

Kon-Boot can change Windows passwords due to embedded Sticky-Keys feature. For example after successful Windows boot with Kon-Boot user can tap SHIFT key 5 times and Kon-Boot will open a Windows console window running with local system privileges. Fully working console can be used for a variety of purposes. For example in case of changing Windows password following command can be used: net user [username] [newpassword](selected user can be later added as new Windows administrator by typing: net localgroup administrators [username] /add). Similarly following command: net user [username] * will erase current Windows password for selected user. Obviously many other actions are available since the Windows console is running with system privileges. In the commercial Kon-Boot editions it is possible to use Automatic PowerShell Script Execution feature which automatically executes (after Windows boot) given PowerShell script with full system privileges. This feature can be used to automatize various tasks for example performing forensics data gathering task etc. To use this feature Windows needs to be installed in UEFI mode.

Limitations (prevention) Users concerned about tools like Kon-Boot should use disk encryption (FileVault, Bitlocker, Veracrypt etc.) software as Kon-Boot is not able to bypass disk encryption. BIOS password and enabled SecureBoot feature is also a good prevention measure. However Kon-Boot since version 3.5 is able to bypass SecureBoot feature. Kon-Boot does not support virtualization and instructs users to turn it off in the bios. Kon-Boot does not support ARM devices such as Apple's M1 chip (newest Apple ARM devices does not support booting from 3rd party media).

References

External links Official website

Illustrations

Kon-Boot: Kon-Boot automatically executing PowerShell script with system privileges
Kon-Boot automatically executing PowerShell script with system privileges

Worked examples

Example 1 — a first encounter with Kon-Boot

Start with the simplest possible case. Write down what Kon-Boot claims or describes in one sentence, then invent the smallest concrete situation in which that sentence is true. In computer science, the smallest case is usually a single object, a single equation or a single measurement. Check that every symbol or term in your sentence has a meaning in that case.

Example 2 — changing one variable

Take the situation from Example 1 and change exactly one quantity: double it, halve it, or set it to zero. Predict what should happen to Kon-Boot before you calculate. Comparing your prediction with the result is the fastest way to find out whether you understand the idea or only the words.

Example 3 — an exam-style question

Typical questions about Kon-Boot ask you to (a) state it precisely, (b) apply it to given data, and (c) explain a limitation. Practise writing all three answers in under five minutes; the third part is what separates a full-mark answer from an average one.

Applications of Kon-Boot

In research
Kon-Boot appears in computer science research whenever the underlying quantities have to be modelled precisely. Papers usually cite it as a starting assumption and then explore where it breaks down.
In technology and industry
Engineering practice reuses Kon-Boot in design rules, simulations and safety margins. Knowing the idea lets you read a specification sheet and understand why the numbers look the way they do.
In the classroom
Kon-Boot is common in secondary-school and first-year university syllabi. It links to neighbouring topics Password cracking software, so understanding it makes those chapters shorter.
In everyday life
Look for Kon-Boot outside the textbook — in sport, cooking, traffic, electronics or the sky above you. An example you found yourself is remembered far longer than one you were given.
Ask Teacher Smith questions about this articleOpens your AI tutor with a question about “Kon-Boot” →

Affiliate

Preply — study more efficiently by working with a personal tutor. 50% off.

How to study Kon-Boot in 20 minutes

  1. Read the reference excerpt below once, without taking notes.
  2. Close the page and write down what Kon-Boot means in your own words.
  3. Compare your version with the excerpt and mark what you missed.
  4. Work through the three examples above with pen and paper.
  5. Explain Kon-Boot out loud to somebody else — or to Teacher Smith in the lgStudy chat.

Frequently asked questions

What is Kon-Boot in simple terms?

Kon-Boot (aka konboot, kon boot) is a software utility that allows users to bypass Microsoft Windows passwords and Apple macOS passwords (Linux support has been deprecated) without lasting or persistent changes to system on which it is executed. It is also the first reported tool and so far the onl…

Why does Kon-Boot matter?

Because it connects several computer science ideas at once: it gives you a definition you can apply, a quantity you can calculate, and a way to check whether a result is plausible.

How should I study Kon-Boot?

Read the excerpt, restate it from memory, then work through the examples and applications listed on this page. The five-step study plan above takes about twenty minutes.

What does this page cover?

It gives you a compact reference excerpt plus original lgStudy explanations, examples, applications and study material on Kon-Boot.

Tags

  • Password cracking software

Keep exploring