Hi, Please help remove BIOS pass. Elitebook 8470p UUID: 2FE0736B246BE21193FF2C187F19D809 SERIAL: CNU3059VQJ Bios Version: 68ICF Ver. F. 32 Thanks.
@Mazzif Hi Mazzif, where can I download the latest version of your password unlocker, everywhere I look the file no longer exists. Cheers in advanced UKJez
@Mazzif Hi Mazzif, i have an HP 6460b with SN: CNU2191KBY, PN: SP936UC and your program says that not support this Serial Number. What i have to do? Thanks, George
Hello, i have a 8770w with admin password. Could someone help me to remove it ? UUID 375DAC2E6EDBE211BD579A8CBF0C20AC thanks
Hello, I have a HP Elitebook 840 g1 UUID:7F14AC40567BE3119E738B15A20FF0FF Could someone help me remove the bios password? Thanks.
Hi. I'm new to unlocking BIOS using reading/writing the EEPROM, but I just ordered the Raspberry Pi 3 and pomona clips to start testing .. Should be getting them in a week or so.. I currently have some 8470p bios locked, and want to test the method of reading the EEPROM, wiping the VSS Store, loading back the modified image, and then setting the Serial, etc using wndmifit. In the mean time, I started playing with the UEFITool and HxD software (which I had never used before).. So I download the latest Bios for the 8470p from the HP site: F.71 Rev.A (sp87467.exe), unpacked it, and found two ROM files: 68ICE and 68ICF. Not sure what's the difference between them, but I tried opening both. So for the 68ICE ROM, if I run a search for "$VSS", I can find the string in the contents. I starts in offset 3932232 (Decimal). But when I open the file in UEFITool (Using the latest build: A49), and try to run a search for VSS, it doesn't come back with any results. I manually reviewed the different sections, but couldn't find a VSS Store. Any idea why the VSS Store is not shown? I also tried a ROM file for the 8470p from the laboneinside.com , and couldn't find the VSS Store in UEFITool either. Mazzif - Excellent work!! The information on this and other posts is very helpful! I have some questions I was hoping you could answer. On posts #118 and #140 for this thread, you mention a new tool you're working on that has a cleaner approach for just writing the S/N and SKU. Would this tool also be able to clear the passwords? Or would the other approach of blowing the entire VSS Store be needed for this? How do you map the addresses that have the S/N and SKU for the different models? Can this be found using a string search on HxD for a real laptop captured image? Or by doing some captured ROM images comparison (e.g.: System that had a S/N and was later changed with wndmifit)? Some posts mention that some chips have OTP enabled. In your experience, most of HP laptops have this disabled, so that read/write can be done with flashrom? And the last question, the software that you're developing.. are you using libflashrom with c? Or just a scripting language that issues flashrom commands? Thanks!
Hello guys, Just bought two "cheap" laptops for kids ,need to remove BIOS password, wifi is off, etc.. Could you please help me? First: ProBook 6570b UUID: 2AD37A842865E211B52B0 SERIAL#: 5CB3032BB5 Second: ProBook 6570b UUID:946510C32865E211B5570666B90000D0 SERIAL#: 5CB3032BBL Thank you in advance.
for some reason first UUID got truncated it is: First: ProBook 6570b UUID: 2AD37A842865E211B52B03B35C0000B6 SERIAL#: 5CB3032BB5
Tons of Qs in there and I will get to them...very good Qs. Its late and Im just getting back home, so it will be later. I will address them though!
On posts #118 and #140 for this thread, you mention a new tool you're working on that has a cleaner approach for just writing the S/N and SKU. Would this tool also be able to clear the passwords? Or would the other approach of blowing the entire VSS Store be needed for this? All we are doing is writing a BIOS image that has no security set up. That is the 'bypass'. The issue that can arise, is that your laptop will now contain the Serial Number, SKU, and UUID contained within the file you flashed. And if its a common file downloaded, then multiple people with have machines with the same data. Not a deal breaker, but seems kind of sloppy. What my 'software' does is takes user input for Serial and SKU, and writes that data to the appropriate place within the BIOS file before writing. So when the write is complete, you have no password, and the data will match your machine. Nice! This also saves the hastle of having to reprogram using WNDMIFIT or anything else. Killing the VSS store worked...but it was sloppy. How do you map the addresses that have the S/N and SKU for the different models? Can this be found using a string search on HxD for a real laptop captured image? Or by doing some captured ROM images comparison (e.g.: System that had a S/N and was later changed with wndmifit)? I just use HxD. The areas usually hang out around below the $VSS flag. Should be able to search for hex string 48 00 50 00 5F 00 53 00 4B 55 for HP_SKU and 48 00 50 00 5F 00 43 00 53 00 4E for HP_CSN. You can change the value there to meet your needs. Some posts mention that some chips have OTP enabled. In your experience, most of HP laptops have this disabled, so that read/write can be done with flashrom? I have not found an HP thta I couldnt read/write as long as it was SOIC8 or 16. WSON packages I cant do anything with. I find those in the G3 models for example. And the last question, the software that you're developing.. are you using libflashrom with c? Or just a scripting language that issues flashrom commands? Just a bash script that puts all the pieces together and then calls flashrom with the appropriate parameters.
^ make sticky or edit first post to include.. i do the reading from windows or linux flashrom with programmer switch -p for ch341a.. didnt feel like buying a raspberry pi
Hi Mazzif, Can you give the link of the Windows Based Utility tool or can you generate for me from the details below, so i can unlock BIOS for my HP EliteBook 8760w. I used the BIOS version with one of the laptop but other one is not with me and no one can do it with BIOS version. sefa.ytu@hotmail.com Serial Number / Asset Tag Number: CNU15101S3 SYSTEM BOARD : PCENK00QE1Y0VP UUID: 11017D114832E1118303A2C25F068033 Regards
Hi People, has anyone attempted the good old brute force ? with the HP BIOS Configuration Utility, they give us all we need. A Tool to create a Password File and a tool to change the password. Just a thought....
Hi Mazzif, I need to remove the bios password from a 8470p. UUID: 92377CF13373E311BCA4D9F2E401A0B3 Serial: CNU3509Y5W Can you or someone help me?
hello ! help me please 840 G1 SERIAL CNU429C4P6 UUID 7FFC7989E67DE311B0A9C31E8503C0FF goodjob@poster.lv
Hey Mazzif, got a locked HP 650 G1. This will be my first try at something like this. Ordered my SOIC clip and have a Pi ready to go. However just got a couple of questions before going ahead. Firstly, there's obviously risk, whats the safest things to do, to ensure I dont f**k the laptop entirely. And secondly, you say its been verified with the 650 G1 model, any chance you have the instruction/images available to help me out at all? Thank you so much!