How secure is 10 vs this?

Below is a simple write up that I thought of earlier tonight, as an idea.

How secure is windows 10 vs a method like the one I proposed? Would it bypass login security?

There's a much easier and simpler way to do the same thing... Do a clean install of windows 10, from boot with a USB, without formatting the drive. Once it's finished, you'll see a windows.old folder... Do with it what you will.

After you're finished, windows leaves you a handy little option to restore the windows.old backup, this makes it as if you never did any of the above.

That was my reply to this article.

Hacking a Windows 10 computer!
A neat trick I learned to hack locked Windows computers and access files. No, it’s not clickbait, but a bit of prior cli knowledge is recommended.
For a while now, Windows has deferred and disappointed hackers with somewhat secure lock screens for their computers. However, this exploit can bypass these login screens and gain access to internal files. I’ll be doing a full walkthrough on exactly how I did it and hopefully you can get some use out of it.
Disclaimer: Do not do anything mentioned or explained in this article to another person or entity without their permission, and I am not responsible for any actions taken using information from this post.

How do you propose to "clean install" Windows without formatting the disk?

It has always been possible to gain full access to any non-Bitlocker drive anyway. Just boot from any OS on a USB such as the Windows InstallUSB.

Several "this" & "it" are not clearly related to specific objects. Perhaps you accidentally deleted a paragraph of your post?

Denis

That was just something I thought of while I was watching a show, I think from the top of my head, the install option would be "start fresh and remove everything" or something along those lines.

I don't believe I left anything out, that's my original response that took me maybe under 3 minutes to post. Anyways, here is the full article if you wish for a more thorough read into what I replied to.
Hacking a Locked Windows 10 Computer With Kali Linux - Pentestmag

So you read an article that said to force the computer off then boot it from a USB. How earth-shattering.
Just because they deliberately made a mountain out of a molehill does not alter the basic nature of what they suggested.
Booting from a USB is described for all to see in How to Boot from a USB Drive - TenForumsTutorials


Denis

To hack a non encrypted computer isn't a real hack.
as mentioned above.. make a Linux boot USB.. boot the computer and you have full access. That is just to easy to even call a hack. :)
To boot in to windows without USB.. then crash it to get to advance bootmenu for repair then activate the built in admin account thru CMD and your in. also an easy way in.

On my computers i don't have disk-encryption on, i use auto login on them to make life easier, as the data is extractable anyway, so why use a login password

Marie SWE said:

.. then crash it to get to advance bootmenu for repair then activate the built in admin account thru CMD ...

This requires approval by an Admin username & password.
The USB boot method does not.

Denis

Try3 said:

This requires approval by an Admin username & password.
The USB boot method does not.

Denis

easiest way is when you are at login screen.. press and hold the Shift key while you select Power then Restart.. they gets you to the advanced boot screen without USB needed.
and if i dont remember wrong.. if you make the system crash three or maybe five times in a row by pulling the powercord at boot so the file system get messed up that makes it go in to repair boot menu too.


Edit...
To not step on rule 6. i refer to this tutorial is stead of writhing the steps.
as for gaining access to the hidden built in administrator account. Enable or Disable Elevated Administrator account in Windows 10


Only an encrypted disk or encrypted user data can protect you.. Not only windows is easy to get around login, Linux is easy too to get around passwords if the home partition/folder isn't encrypted.. But always a booteble USB is way faster to get access to an unencrypted disk/user

"gets you to the advanced boot screen without USB needed." and you need to give Admin permission to enable the Built-in Admin from there. That's why it is not a useful method.

Denis

Try3 said:

"gets you to the advanced boot screen without USB needed." and you need to give Admin permission to enable the Built-in Admin from there. That's why it is not a useful method.

Denis

i did an edit how to get access to the built in admin account without need for password
I will test it after some sleep.

For now.. Good night

I'm trying to explain to you that what you posted does not work.
Booting from a USB does.

Denis