VOBIS & IBM BIOS serial key or number
VOBIS & IBM BIOS serial key or number
BIOS Master- and Setup-Passwords
Delete BIOS-Passwords on PC-Mainboards
Delete BIOS-Passwords on Notebooks
BIOS-Setup-Password via Software
BIOS Master-Passwords
Delete BIOS-Boot Password
Delete BIOS-Setup Password
Keystrokes to Enter the BIOS-Setup
Clear the CMOS of your PC-Mainboard if you want to reset the BIOS-Boot password or BIOS-Setup password:
CMOS-Reset instructions for PC-Mainboards and Notebooks
Delete BIOS-Boot Password
Delete BIOS-Setup Password
Don't clear the CMOS of your Notebook, because it will not reset any BIOS-Boot password or BIOS-Setup password! Notebooks have better theft protections like an additional (tiny, hidden) IC-integrated module that contains the password. Some manufacturers store the password on a hidden hard disk sector. So, the only solution is a direct contact to the manufacturer's support, where they proof that you are the legal owner of the notebook. Depending on the manufacturer, you have to send him the serial number of the notebook and you'll get (in many cases free of charge) an individual master password to unlock the notebook. Some other manufacturers even offer only the replacement of the notebook's mainboard - which will be really expensive!
You can download the free, small program ctbios15.zip from the german Computermagazine c't. Ctbios shows the password and some other interesting things about your BIOS. (great tip!)
Lost your BIOS-Setup password or BIOS-Boot password? You can try one of the following Master passwords:
AWARD Master passwords | ||
01322222 | bios | lkw peter |
1EAAh | BIOS | lkwpeter |
256256 | biostar | PASSWORD |
589589 | biosstar | SER |
589721 | CONCAT | setup |
?award | CONDO | SKY_FOX |
admin | condo | SWITCHES_SW |
alfarome | djonet | Sxyz |
aLLy | efmukl | SZYX |
aPAf | g6PJ | t0ch88 |
award | h6BB | t0ch20x |
award_? | HELGA-S | ttptha |
award.sw | HEWITT RAND | TTPTHA |
AWARD SW | HLT | TzqF |
AWARD_SW | j09F | wodj |
AWARD_PW | j256 | ZAAADA |
award_ps | j262 | zbaaaca |
AWARD?SW | j322 | zjaaadc |
awkward | j64 | zjaaade |
AMI Master passwords | ||
ami | amiami | CMOSPWD |
amidecod | AMI.KEY | KILLCMOS |
amipswd | AMISETUP | 589589 |
AMIPSWD | AMI?SW | ami.kez |
AMI | AMI!SW | ami° |
A.M.I. | AMI_SW | helgasss |
aammii | bios310 | HEWITT RAND |
AMI~ | BIOSPASS |
Master passwords from different Manufacturers |
Advance Integration: Advance |
Amptron: Polrty |
AST: SnuFG5 |
Biostar: Biostar / Q54arwms |
Compaq:compaq |
Concord: last |
CTX International: CTX_123 |
CyberMax: Congress |
Daytek+Daewoo:Daytec/Daewuu |
DELL: DELL |
Digital Equipment: komprie |
Enox: xo11nE |
Epox: central |
Freetech: Posterie |
HP Vectra Serie: hewlpack |
IBM: IBM / MBIUO / sertafu |
IBMAptiva: press both mousekeys |
Iwill: iwill |
Jet Way: spoom1 |
Joss Techn.: 57gbz6 / Technolgi |
MachSpeed: sp99dd |
Magic-Pro: prost |
Megastar: Star |
Micron: sldkj754 / xyzall |
Micronics: dn_04rjc |
M Technology: mMmM |
Nimble: xdfk9874t3 |
Packard Bell: Bell9 |
QDI: QDI |
Quantex: teX1 / xljlbj |
Research: Col2ogro2 |
Shuttle: Spacve |
Siemens Nixdorf: SKY_FOX |
Speedeasy: lesarot1 |
SuperMicro: ksdjfg934t |
Tiny: Tiny |
TMC: BIGO |
Toshiba:24Banc81/Toshiba/toshy99 |
ToshibaLaptops: press left Shiftkey |
Vextrec Technology: Vextrec |
Vobis: merlin |
WIMBIOS v2.10: Compleri |
Zenith: 3098z / Zenith |
Zeos: zeosx |
If you have forgotten your BIOS Boot-Password, have a look into your mainboard manual, or after opening your PC, onto your mainboard. Many mainboards have a JUMPER or SWITCH to clear the CMOS. This Jumper is often named like: "RTC_CLEAR" , "CLEAR CMOS" , "CLRCMOS" , "CLRCMS". His position is often near by the mainboard battery.
Attention: All hardware settings (harddisk-, bootsequence,-...settings) will be deleted! At least, you have to re-insert them again.
See: CMOS-Reset instructions for PC-Mainboards and Notebooks
If you can't enter the Setup of your BIOS, you need a DOS-Bootdisk and one of the following MS-DOS Files:
Filename | Sourcecode I | Sourcecode II |
DEBUG.EXE | - o 70 2E - o 71 FF - Q | - o 70 17 - o 71 17 - Q |
QBASIC.EXE | - 10 OUT &H70,17 - 20 OUT &H71,0 | - 10 OUT &H70,&H17 - 20 OUT &H71,&H17 |
Start the file an insert the sourcecode line by line.
Different keystrokes to enter the BIOS-Setup:
Keystrokes | Manufacturer |
Del | AMI, AWARD |
ESC | Toshiba |
F1 | Toshiba, Phoenix and later models from Late model PS/1 Value Point and 330s |
F2 | NEC, Dell |
F10 | Compaq |
Ins | IBM PS/2s |
twice Reset | Dell |
Alt+Return | Dell |
Alt+"?" | some PS/2-Models |
Ctrl+Esc | General |
Ctrl+Ins | some PS/2-Models |
Ctrl+Alt+Esc | AST Advantage, Award, Tandon |
Ctrl+Alt+"+" | General |
Ctrl+Alt+S | Phoenix |
Ctrl+Alt+Ins | Zenith, Phoenix |
Ctrl+S | Phoenix |
Ctrl+Shift+Esc | Tandon 386er |
Ctrl+Shift+Alt +Del(num.Keypad) | Olivetti PC Pro |
Setupdisk | Compaq, Epson, IBM, Toshiba, 286er |
+++ PixelRuler- the Screenruler for only 5€ +++
(free for private use)
Default Passwords
This page serves as a repository of default passwords for various devices and applications.
Hardware devices listed below include network devices such as routers, modems, and firewalls, along with various storage devices and computer systems. This is a substantial list, but it is not regularly updated. Revision numbers are therefore included where applicable in order to ensure accuracy.
If your device’s listed default password is incorrect or if you would like to submit a password for inclusion on this list, please send an email to help at datarecovery.com with this page’s URL (https://datarecovery.com/rd/default-passwords/) in the subject line.
All of these admin passwords are provided for research purposes and for legal, legitimate use.
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
---|---|---|---|---|---|---|---|
3Com | – | 1.25 | root | letmein | |||
3com | 3comCellPlex7000 | – | tech | tech | |||
3COM | AccessBuilder | 7000 BRI | SNMP | SNMPWrite | private | Admin | |
3COM | AirConnect Access | 01.50-01 | Multi | (none) | (none) | Admin | |
3Com | AirConnect Access Point | n/a | (none) | comcomcom | |||
3com | Cable Managment System SQL Database (DOSCIC DHCP) | Win2000 & MS | DOCSIS_APP | 3com | Admin | ||
3COM | CellPlex | 7000 | Telnet | admin | (none) | Admin | |
3COM | CellPlex | 7000 | Telnet | (none) | (none) | Admin | |
3COM | CellPlex | 7000 | Telnet | root | (none) | Admin | |
3COM | CellPlex | 7000 | Telnet | tech | (none) | Admin | |
3COM | CoreBuilder | 7000 | Telnet | operator | admin | Admin | |
3COM | CoreBuilder | 7000/6000/ 3500/2500 | SNMP | SNMPWrite | private | Admin | |
3Com | CoreBuilder | 6000 | debug | tech | |||
3COM | HiPerARC | v4.1.x | Telnet | adm | (none) | Admin | |
3com | Home Connect | – | User | Password | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
3COM | LANplex | 2500 | Telnet | tech | tech | ||
3COM | LinkBuilder | Telnet | tech | tech | Admin | ||
3COM | LinkSwitch | 2000/2700 | Telnet | tech | tech | ||
3Com | LinkSwitch and CellPlex | – | tech | tech | |||
3com | NBX100 | 2.8 | administrator | 0 | |||
3COM | NetBuilder | Multi | admin | (none) | Admin | ||
3COM | NetBuilder | SNMP | (none) | ILMI | snmp-read | SNMP disabled by default | |
3COM | NetBuilder | SNMP | (none) | ANYCOM | SNMP disabled by default | ||
3COM | OCR-812 | – | root | !root | |||
3COM | Office Connect | 812 | Multi | root | !root | Admin | |
3COM | Office Connect ISDN Routers | 5×0 | Telnet | (none) | PASSWORD | Admin | |
3Com | OfficeConnect 5×1 | at least 5.x | (none) | PASSWORD | |||
3com | OfficeConnect 812 ADSL | Multi | adminttd | adminttd | Admin | ||
3Com | SuperStack / CoreBuilder | – | admin | (none) | |||
3Com | SuperStack / CoreBuilder | – | write | (none) | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
3com | Superstack II 3300FX | – | admin | (none) | |||
3COM | SuperStack II Switch | 1100/3300 | Console | 3comcso | RIP000 | initialize | |
3COM | SuperStack II Switch | 2200 | Telnet | debug | synnet | ||
3COM | SuperStack II Switch | 1100/3300 | Telnet | monitor | monitor | Monitor | |
3COM | SuperStack II Switch | 1100/3300 | Telnet | security | security | Admin | |
3Com | SuperStack II Switch 1100 | – | manager | manager | |||
3Com | SuperStack II Switch 2200 | – | debug | synnet | |||
3Com | SuperStack II Switch 3300 | – | manager | manager | |||
3COM | SuperStack III Switch | 4XXX | Multi | manager | manager | Admin | |
3COM | SuperStack III Switch | 4XXX | Multi | recovery | recovery | Reset | |
3COM | Switch | 3300XM | Multi | admin | admin | Admin | |
3com | Switch 3000/3300 | – | Admin | 3com | |||
3Com | Switch 3000/3300 | – | monitor | monitor | |||
3COM | Wireless AP | Any | Multi | admin | comcomcom | Admin | |
3COM | Telnet | admin | synnet | ||||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
3COM | Telnet | monitor | monitor | ||||
3COM | Telnet | security | security | ||||
3COM | – | 1.25 | root | letmein | |||
3M | Volition Fibre Switches | VOL-0215 etc. | SNMP | volition | volition | Admin | |
ACC | Congo/Amazon/Tigris | All | Multi | netman | netman | ||
Acc/Newbridge | Congo/Amazon/Tigris | Any | netman | netman | |||
Acer | 517te | Multi | (none) | (none) | Admin | ||
Acer | Phoenix | Multi | n/a | (none) | Admin | ||
Adaptec | Storage Manager PRO | all | Multi | Administrator | adaptec | Admin | |
Adaptec | Storage Manager PRO | all | Multi | Administrator | adaptec | Admin | |
ADP | ADP Payroll HR Database | Any | Multi | sysadmin | master | Admin | |
Adtran | MX2800 | Telnet | (none) | adtran | |||
Adtran | TSU 600 Ethernet module | All | 18364 | (none) | Admin | ||
Aironet | All | – | (none) | (none) | |||
alcatel | – | – | (none) | (none) | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Alcatel | Office 4200 | Multi | (none) | 1064 | Admin | ||
Alcatel | OmniStack/OmniSwitch | Telnet/ Console | diag | switch | Admin | ||
Alcatel | PBX | Port 2533 | at4400 | at4400 | unknown | ||
Alcatel | PBX | Port 2533 | dhs3mt | dhs3mt | unknown | ||
Alcatel | PBX | Port 2533 | halt | tlah | unknown | ||
Alcatel | PBX | Port 2533 | kermit | kermit | unknown | ||
Alcatel | PBX | Port 2533 | mtcl | mtcl | unknown | ||
alcatel | speed touch home | – | (none) | (none) | |||
Alcatel | VPN Gateway | 15xx/ 45xx/ 7xxx | root | permit | Admin | ||
Alcatel/Newbridge/ Timestep | VPN Gateway 15xx/45xx/7xxx | Any | root | permit | |||
Allied | CJ8MO E-U | Telnet | (none) | (none) | Admin | ||
Allied | Telesyn | Multi | secoff | secoff | Admin | ||
Allied | CJ8MO E-U | Telnet | (none) | (none) | Admin | ||
Allied | Telesyn | Multi | secoff | secoff | Admin | ||
ALLNET | ALL129DSL | admin | admin | Admin | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Alteon | ACEDirector3 | console | admin | (none) | Admin | ||
Alteon | ACEswitch | 180e | HTTP | admin | admin | Admin | |
Alteon | ACEswitch | 180e | HTTP | admin | linga | Admin | |
Alteon | ACEswitch | 180e | Telnet | admin | (none) | ||
Alteon | Web Systems | 5.2 | Telnet | (none) | 14admin | Admin | |
Alteon | ACEDirector3 | console | admin | (none) | Admin | ||
Alteon | ACEswitch | 180e | HTTP | admin | admin | Admin | |
Alteon | ACEswitch | 180e | HTTP | admin | linga | Admin | |
Alteon | ACEswitch | 180e | Telnet | admin | (none) | ||
Alteon | Web Systems | 5.2 | Telnet | (none) | 14admin | Admin | |
AMBIT | ADSL | Telnet | root | (none) | Admin | ||
AMI | AT 49 | Multi | (none) | (none) | Admin | ||
AMI | PC BIOS | Console | (none) | aammii | Admin | ||
AMI | PC BIOS | Console | (none) | AMI.KEY | Admin | ||
AMI | PC BIOS | Console | (none) | AMI~ | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
AMI | PC BIOS | Console | (none) | AMIDECOD | Admin | ||
AMI | PC BIOS | Console | (none) | amipswd | Admin | ||
AMI | PC BIOS | Console | (none) | BIOSPASS | Admin | ||
AMI | PC BIOS | Console | (none) | AM | Admin | ||
AMI | PC BIOS | Console | (none) | A.M.I | Admin | ||
AMI | PC BIOS | Console | (none) | CMOSPWD | Admin | ||
Amptron | PC BIOS | Console | (none) | Polrty | Admin | ||
APC | Any | Firmware Pri | apcuser | apc | |||
APC | MasterSwitch | AP9210 | apc | apc | Admin | ||
APC | Powerchute Plus | 4.x for Netware 3.x/4.x | Console | POWERCHUTE | APC | Admin | |
APC | SNMP Adapter | 2.x | apc | apc | |||
APC | Web/SNMP Management Card | AP9606 | Multi | apc | apc | Admin | |
Apple | Airport | 1.1 | (none) | public | User | ||
Armenia | Forum | Multi | admin | admin | Admin | ||
Arrowpoint | any? | – | admin | system | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Asante | IntraSwitch | Multi | IntraSwitch | Asante | Admin | ||
Ascend | All TAOS models | all | admin | Ascend | Admin | ||
Ascend | Router | Telnet | (none) | ascend | Admin | ||
Ascend | Yurie | Multi | readonly | lucenttech2 | Read | ||
Ascom | Ascotel PBX | Multi | (none) | 3ascotel | Admin | ||
Aspect | ACD | 6 | HTTP | customer | (none) | User | |
Aspect | ACD | 8 | Oracle | DTA | TJM | User | |
AST | PC BIOS | Console | (none) | SnuFG5 | Admin | ||
Attachmate | Attachmate Gateway | Console | (none) | PASSWORD | Admin | ||
Audioactive | MPEG Realtime Encoders | Telnet | (none) | telos | Admin | ||
Autodesk | Autocad | Multi | autocad | autocad | User | ||
Avaya | Cajun | P550R P580 P880 882 | Multi | diag | danger | Developer | |
Avaya | Cajun | P550R/ P580/ P880/ P882 | Telnet | (none) | (none) | Admin | |
Avaya | Cajun Pxxx | Multi | root | root | Admin | ||
Avaya | Pxxx | 5.2.14 | Multi | manuf | xxyyzz | Admin | |
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
AWARD | PC BIOS | Console | Administrator | admin | Admin | ||
AWARD | PC BIOS | Console | (none) | 256256 | Admin | ||
AWARD | PC BIOS | 1.0A | Console | (none) | (none) | Admin | |
AWARD | PC BIOS | Console | (none) | (none) | Admin | ||
AWARD | PC BIOS | Console | (none) | 256256 | Admin | ||
AWARD | PC BIOS | Console | (none) | alfarome | Admin | ||
AWARD | PC BIOS | Console | (none) | aPAf | Admin | ||
AWARD | PC BIOS | Console | (none) | Award | Admin | ||
AWARD | PC BIOS | Console | (none) | AWARD_SW | Admin | ||
AWARD | PC BIOS | Console | (none) | BIOS | Admin | ||
AWARD | PC BIOS | Console | (none) | biostar | Admin | ||
AWARD | PC BIOS | Console | (none) | condo | Admin | ||
AWARD | PC BIOS | Console | (none) | CONDO, | Admin | ||
AWARD | PC BIOS | Console | (none) | h6BB | Admin | ||
AWARD | PC BIOS | Console | (none) | HEWITT RAND | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
AWARD | PC BIOS | Console | (none) | j09F | Admin | ||
AWARD | PC BIOS | Console | (none) | j262 | Admin | ||
AWARD | PC BIOS | Console | (none) | j64 | Admin | ||
AWARD | PC BIOS | Console | (none) | lkwpeter | Admin | ||
AWARD | PC BIOS | Console | (none) | PASSWORD | Admin | ||
AWARD | PC BIOS | Console | (none) | setup | Admin | ||
AWARD | PC BIOS | Console | (none) | SW_AWARD | Admin | ||
AWARD | PC BIOS | Console | (none) | Sxyz | Admin | ||
AWARD | PC BIOS | Console | (none) | t0ch20x | Admin | ||
AWARD | PC BIOS | Console | (none) | TTPTHA | Admin | bea2 hash | |
AWARD | PC BIOS | Console | (none) | wodj | Admin | ||
Axent | NetProwler manager | WinNT | administrator | admin | |||
AXIS | 200 V1.32 | – | admin | (none) | |||
Axis | NETCAM | 200/240 | Telnet | root | pass | Admin | |
Axis | Printserver | 540/540+ | Multi | root | pass | Admin | |
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
AXIS | 200 V1.32 | – | admin | (none) | |||
Axis | NETCAM | 200/240 | Telnet | root | pass | Admin | |
Axis | Printserver | 540/540+ | Multi | root | pass | Admin | |
B-FOCuS | B-FOCuS 270/400 | root | 1234 | admin | |||
bay | cv1001003 | – | (none) | (none) | |||
bay | cv1001003 | – | (none) | (none) | |||
bay | cv1001003 | – | (none) | (none) | |||
bay | cv1001003 | – | (none) | (none) | |||
BEA | Weblogic | 5.1 | system | weblogic | |||
BEA | Weblogic | 5.1 | system | weblogic | |||
BEA | WebLogic Process Integrator | 2 | joe | password | User | ||
BEA | WebLogic Process Integrator | 2 | system | security | Admin | ||
Beck | IPC@Chip | HTTP | anonymous | (none) | User | ||
Beck | IPC@Chip | HTTP | tel | (none) | User | ||
Belkin | F5D6130 | SNMP | (none) | MiniAP | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Bintec | all Routers | Any | admin | bintec | |||
Bintec | Bianka Routers | Multi | admin | bintec | Admin | ||
BioData | all Babylon Boxes | (none) | Babylon | Admin | |||
Biostar | PC BIOS | Console | (none) | Q54arwms | Admin | ||
BizDesign | ImageFolio Pro | 2.2 | HTTP | Admin | ImageFolio | Admin | |
BMC | Patrol | 6 | Multi | patrol | patrol | User | |
Borland | Interbase | Any | politcally | correct | Admin | ||
Borland/ Inprise | Interbase | any | SYSDBA | masterkey | |||
Boston | router simulator | 3.66 | HTTP | admin | admin | User | |
Boston | router simulator | 3.66 | Multi | (none) | admin | Admin | |
BreezeCOM | – | 3.x | (none) | Master | |||
Breezecom | Breezecom Adapters | 2.x | (none) | laflaf | Admin | ||
Breezecom | Breezecom Adapters | 3.x | (none) | Master | Admin | ||
BreezeCOM | Station Adapter and Access Point | 4.x | (none) | Super | |||
Brocade | Fiberchannel Switches | Multi | admin | password | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Brother | HL-1270n | Telnet | (none) | access | Admin | ||
Brother | NC-3100h | Telnet | (none) | access | Admin | ||
Brother | NC-4100h | Telnet | (none) | access | Admin | ||
Buffalo/MELCO | AirStation WLA-L11 | root (cannot be changed) | (none) | Admin | |||
Cabletron | any | any | (none) | (none) | |||
Cabletron | Netgear modem/router and SSR | netman | (none) | Admin | |||
Cabletron/ Enterasys | WebView for Matrix E1 (1G694-13 or 1G582-09 or 1H582-51) switch | HTTP | (none) | (none) | Admin | ||
Cayman | 3220-H DSL Router | GatorSurf 5 | Any | (none) | |||
Cayman | Cayman DSL | (none) | (none) | Admin | |||
Celerity | Mediator | Multi | Multi | mediator | mediator | User | |
Cellit | CCPro | Multi | cellit | cellit | Admin | ||
Checkpoint | SecurePlatform | NG FP3 | Console | admin | admin | Admin | |
Cisco | 2503 | – | (none) | (none) | |||
Cisco | 1900 | Multi | (none) | (none) | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Cisco | 2501 | Telnet | (none) | (none) | Admin | ||
Cisco | 3600 | Telnet | (none) | (none) | Admin | ||
Cisco | aironet | Multi | (none) | (none) | Admin | ||
Cisco | Any Router and Switch | 10 – 12 | cisco | cisco | |||
Cisco | BBSD MSDE Client | 5.0, 5.1 | Telnet or Named Pipes | bbsd-client | NULL | database | |
Cisco | BBSM Administrator | 5.0, 5.1 | Multi | Administrator | changeme | Admin | |
Cisco | Cache Engine | Console | admin | diamond | Admin | ||
Cisco | CiscoWorks 2000 | admin | cisco | Admin | |||
Cisco | CiscoWorks 2000 | guest | (none) | User | |||
Cisco | ConfigMaker | cmaker | cmaker | Admin | |||
Cisco | Content Engine | Telnet | admin | default | Admin | ||
Cisco | Hot Standby Routing Protocol | HSRP | (none) | cisco | Admin | ||
Cisco | IOS | Multi | cisco | cisco | |||
Cisco | IOS | Multi | (none) | cc | |||
Cisco | IOS | Multi | (none) | Cisco router | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Cisco | IOS | 2600 series | Multi | (none) | c | but these are common misconfigurations | |
Cisco | IOS | 12.1(3) | SNMP | (none) | cable-docsis | SNMP read-write | |
Cisco | IOS | SNMP | private ReadWrite access | secret | Read/Write | ||
Cisco | IOS | Multi | ripeop | (no pw) | |||
Cisco | MGX | superuser | superuser | Admin | |||
CISCO | N/A | N/A | pixadmin | pixadmin | |||
Cisco | Netranger/secure IDS | Multi | netrangr | attack | |||
Cisco | Network Registar | 3.0 | ADMIN | changeme | Admin | ||
Cisco | pix | Multi | (none) | (none) | Admin | ||
Cisco | PIX firewall | Multi | (none) | (none) | Admin | ||
Cisco | Router | 1 | Multi | (none) | (none) | Admin | |
Cisco | VPN 3000 Concentrator | – | admin | admin | |||
Cisco-Arrowpoint | Arrowpoint | admin | system | Admin | |||
Cobalt | RaQ * Qube* | Any | admin | admin | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Com21 | General Equipment(?) | (none) | (none) | Admin | |||
Comersus | Shopping Cart | 3.2 | HTTP | admin | dmr99 | Admin | |
Comersus | Shopping Cart | 3.2 | HTTP | admin | dmr99 | Admin | |
Compaq | Armada E500 | pp2060 | Multi | Administrator | admin | Admin | |
Compaq | Armada M700 | Console | Administrator | admin | Guest | ||
Compaq | dc770t | Multi | (none) | (none) | Admin | ||
Compaq | Insight Manager | Multi | (none) | (none) | Admin | ||
Compaq | Insight Manager | anonymous | (none) | User | |||
Compaq | Insight Manager | PFCUser | 240653C9467E45 | User | |||
Compaq | Insight Manager | user | user | User | |||
Compaq | Management Agents | All | administrator | none | Admin | ||
Compaq | PC BIOS | Console | (none) | Compaq | Admin | ||
Compualynx | Cmail Server | Any | Multi | administrator | asecret | Admin | |
Compualynx | SCM | Any | Multi | administrator | asecret | Admin | |
Concord | PC BIOS | (none) | last | Admin | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Coyote-Point | Equaliser 4 | Free BSD | Serial | eqadmin | equalizer | Admin | |
Coyote-Point | Equaliser 4 | Free BSD | Serial | root | (none) | Admin | |
Crystalview | OutsideView 32 | (none) | Crystal | Admin | |||
Cyberguard | all firewalls | all | console + passport1 | cgadmin | cgadmin | Admin | |
CyberMax | PC BIOS | Console | (none) | Congress | Admin | ||
Cyclades | Cyclades-TS800 | TS800 | telnet/ssh/ web | root | (none) | Admin | |
Cyclades | MP/RT | super | surt | Admin | |||
D-Link | DI-701 | Multi | (none) | year2000 | Admin | ||
D-Link | DI-704 | – | (none) | admin | Admin | ||
D-Link | Dl 604 | 1.8 | Multi | admin | (none) | Admin | |
D-Link | DWL 900AP | Multi | admin | public | Admin | ||
D-Link | DWL-900+ | HTTP | admin | (none) | Admin | ||
D-Link | Cable/DSL Routers/Switches | Multi | (none) | admin | Admin | ||
D-Link | DFE-538TX 10/100 Adapter | (none) | (none) | Admin | |||
D-Link | DI-106 ISDN router | (none) | 1234 | Admin | |||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
D-Link | DI-604 | 1.62b+ | HTTP | admin | (none) | Admin | |
D-Link | DI-614+ | HTTP | user | (none) | User | ||
Daewoo | PC BIOS | Console | (none) | Daewuu | Admin | ||
Datacom | BSASX/101 | (none) | letmein | Admin | |||
Datawizard.net | FTPXQ server | FTP | anonymous | any@ | read/write on c:”; | ||
“Davox | Unison | ||||||
Davox | Unison | Multi | davox | davox | User | ||
Davox | Unison | Sybase | sa | (none) | Admin | ||
Daytek | PC BIOS | Console | (none) | Daytec | Admin | ||
Debian | Linux LILO Default | 2.2 | Console | (none) | tatercounter2000 | Admin | |
decnet | decnet | Multi | operator | admin | Guest | ||
Deerfield | MDaemon | HTTP | MDaemon | MServer | Admin | ||
Dell | bios | d35b | Multi | (none) | (none) | Admin | |
Dell | c600 | 595b | Multi | (none) | (none) | User | |
Dell | cpx h500gt | Multi | (none) | (none) | Admin | ||
Manufacturer | Model/Name | Revision | Protocol | User | Password | Access Level | Notes |
Dell | CSr500xt | Multi | (none) | admin | Admin | ||
Dell | dell latitude cpx | Multi | admin | admin | User | ||
dell | inspiron | Multi | (none) | admin | Admin | ||
Dell | Latitude | Bios D35B | Multi | (none) | 1RRWTTOOI | Admin | |
Dell | LATITUDE | D35B | Multi | (none) | (none) | Admin | |
Dell | latitude c610 | a07 | Multi | admin | admin | Admin | |
Dell | notebook | Multi | (none) | (none) | Admin | ||
Dell | PC BIOS | Console | (none) | Dell | Admin | ||
Dell | PowerApp Web 100 Linux | RedHat 6.2 | HTTP | root | powerapp | Admin | |
Dell |
Undercover Blog
Introduction to BIOS Passwords
The best method to reset a BIOS password depends on what BIOS the computer has. Common BIOS’s include AMI, Award, IBM and Phoenix. Numerous other BIOS’s do exist, but these are the most common.
Some BIOS’s allow you to require a password be entered before the system will boot. Some BIOS’s allow you to require a password to be entered before the BIOS setup may be accessed.
The general categories of solutions to reset a BIOS password are:
- Using a Backdoor BIOS Password
- Resetting the BIOS Password using Software
- Resetting the BIOS Password using Hardware
- Vendor Specific Solutions for resetting the BIOS Password
Using a Backdoor BIOS Password
Some BIOS manufacturers implement a backdoor password. The backdoor password is a BIOS password that works, no matter what the user sets the BIOS password to. These passwords are typically used for testing and maintenance. Manufacturers typically change the backdoor BIOS passwords from time to time.
AMI Backdoor BIOS Passwords
Reported AMI backdoor BIOS passwords include A.M.I., AAAMMMIII, AMI?SW , AMI_SW, BIOS, CONDO, HEWITT RAND, LKWPETER, MI, and PASSWORD.
Award Backdoor BIOS Passwords
One reported Award backdoor BIOS password is eight spaces. Other reported Award backdoor BIOS passwords include 01322222, 589589, 589721, 595595, 598598 , ALFAROME, ALLY, ALLy, aLLY, aLLy, aPAf, award, AWARD PW, AWARD SW, AWARD?SW, AWARD_PW, AWARD_SW, AWKWARD, awkward, BIOSTAR, CONCAT, CONDO, Condo, condo, d8on, djonet, HLT, J256, J262, j262, j322, j332, J64, KDD, LKWPETER, Lkwpeter, PINT, pint, SER, SKY_FOX, SYXZ, syxz, TTPTHA, ZAAAADA, ZAAADA, ZBAAACA, and ZJAAADC.
Phoenix Backdoor BIOS Passwords
Reported Phoenix BIOS backdoor passwords include BIOS, CMOS, phoenix, and PHOENIX.
Backdoor BIOS Passwords from Other Manufacturers
Reported BIOS backdoor passwords for other manufacturers include:
Manufacturer BIOS Password VOBIS & IBM merlin Dell Dell Biostar Biostar Compaq Compaq Enox xo11nE Epox central Freetech Posterie IWill iwill Jetway spooml Packard Bell bell9 QDI QDI Siemens SKY_FOX SOYO SY_MB TMC BIGO Toshiba Toshiba
Remember that what you see listed may not be the actual backdoor BIOS password, this BIOS password may simply have the same checksum as the real backdoor BIOS password. For Award BIOS, this checksum is stored at F000:EC60.
Resetting the BIOS Password using Software
Every system must store the BIOS password information somewhere. If you are able to access the machine after it has been booted successfully, you may be able to view the BIOS password. You must know the memory address where the BIOS password is stored, and the format in which the BIOS password is stored. Or, you must have a program that knows these things.
You can write your own program to read the BIOS password from the CMOS memory on a PC by writing the address of the byte of CMOS memory that you wish to read in port 0x370, and then reading the contents of port 0x371.
!BIOS will recover the BIOS password for most common BIOS versions, including IBM, American Megatrends Inc, Award and Phoenix.
CmosPwd will recover the BIOS password for the following BIOS versions:
- ACER/IBM BIOS
- AMI BIOS
- AMI WinBIOS 2.5
- Award 4.5x/4.6x/6.0
- Compaq (1992)
- Compaq (New version)
- IBM (PS/2, Activa, Thinkpad)
- Packard Bell
- Phoenix 1.00.09.AC0 (1994), a486 1.03, 1.04, 1.10 A03, 4.05 rev 1.02.943, 4.06 rev 1.13.1107
- Phoenix 4 release 6 (User)
- Gateway Solo – Phoenix 4.0 release 6
- Toshiba
- Zenith AMI
Resetting the BIOS Password using Hardware
If you cannot access the machine after if has been powered up, it is still possible to get past the BIOS password. The BIOS password is stored in CMOS memory that is maintained while the PC is powered off by a small battery, which is attached to the motherboard. If you remove this battery, all CMOS information (including the BIOS password) will be lost. You will need to re-enter the correct CMOS setup information to use the machine. The machines owner or user will most likely be alarmed when it is discovered that the BIOS password has been deleted.
On some motherboards, the battery is soldered to the motherboard, making it difficult to remove. If this is the case, you have another alternative. Somewhere on the motherboard you should find a jumper that will clear the BIOS password. If you have the motherboard documentation, you will know where that jumper is. If not, the jumper may be labeled on the motherboard. If you are not fortunate enough for either of these to be the case, you may be able to guess which jumper is the correct jumper. This jumper is usually standing alone near the battery. If you cannot locate this jumper, you might short both of the points where the battery connects to the motherboard.
If all else fails, you may have to clear the BIOS password by resetting the RTC (Real Time Clock) IC (Integrated Circuit) on your motherboard.
Many RTC’s require an external battery. If your RTC is one of this type, you can clear the BIOS password just by unsocketing the RTC and reseating it.
RTC’s which require external batteries include:
Most RTC chips with integrated batteries can be reset to clear the BIOS password by shorting two pins together for a few seconds.
You will see more than one option for some chips due to testing by various people in the field. Remember to remove power from the system before shorting these pins.
You should be able to discover how to reset the BIOS password stored in most RTC (Real Time Clock) chips by reading the manufacturers data sheet for that RTC. Some RTC’s, like the Dallas DS1287 and TI benchmarq bq3287mt cannot be cleared. The solution to resetting the BIOS password on systems with those RTC’s is to purchase a replacement RTC chip. How inconvenient!
Vendor Specific Solutions for Resetting the BIOS Password
Resetting a Dell BIOS Password
For information on how to recover a Dell BIOS password, please refer to How do I reset a Dell BIOS password?
Resetting a Toshiba BIOS Password
KeyDisk will reset the BIOS password on Toshiba laptops.
Older Toshiba laptops can be convinced to boot without their power-on BIOS password by attaching a dongle to the parallel port which crosses a number of the pins. The pin out is:
Pins 1-5-10 2-11 3-17 4-12 6-16 7-13 8-14 9-15
Some Toshiba’s can be convinced to bypass the startup BIOS password if you hold down the <LEFT-SHIFT> key while booting the system.
Resetting an IBM ThinkPad BIOS Password
For information on how to recover an IBM Thinkpad BIOS password, please refer to How do I reset an IBM ThinkPad BIOS password?
Resetting an IBM Aptiva BIOS Password
Some IBM Aptiva’s can be convinced to bypass the startup BIOS password if you press both mouse buttons repeatedly while booting the system.
Resetting an Acer BIOS Password
For information on how to recover an Acer BIOS password, please refer to How do I reset an Acer BIOS password?
Summary
The BIOS password can be reset on any system. Some systems are easy, others are more difficult. Any BIOS password can be reset with sufficient time, money and effort.
[via Tech-Faq]
What’s New in the VOBIS & IBM BIOS serial key or number?
Screen Shot
System Requirements for VOBIS & IBM BIOS serial key or number
- First, download the VOBIS & IBM BIOS serial key or number
-
You can download its setup from given links: