Iβm documenting my journey from learning the fundamentals to building real security projects.
If youβre into:
π‘οΈ Cybersecurity
π΅ Blue Team / SOC
π΄ Red Team
π Python
π Networking
π» Tech
Drop a follow and letβs connect.
Iβd love to meet more people building and learning here.
@CyberRacheal It safely locks the actual password, network name (SSID), and security settings into its encrypted system memory.
Android: Kept in a protected system file (/data/misc/wifi/)
iOS: Locked away securely in your Apple Keychain
Iβm documenting my journey from learning the fundamentals to building real security projects.
If youβre into:
π‘οΈ Cybersecurity
π΅ Blue Team / SOC
π΄ Red Team
π Python
π Networking
π» Tech
Drop a follow and letβs connect.
Iβd love to meet more people building and learning here.
GUYS!!! ππππ½ππ½
We just crossed 100 followers!!! ππ
100 people are now following this little corner where I document my cybersecurity journey, learn in public, make mistakes, ask questions, and hopefully grow into the cybersecurity professional Iβm working towards becoming. π₯Ή
I genuinely appreciate every single one of you.
100 today. 1,000 next. π
Thank you for coming along for the journey! π«Άπ½π
Depends on the VM platform and OS but here is how it works across the most common scenarios.
VMware (Windows guest)
Boot the VM from a Windows installation ISO. Choose Repair your computer instead of Install. Open Command Prompt from recovery options. Navigate to System32 and replace Utilman.exe with cmd.exe by renaming it. Reboot normally. At the login screen click the Accessibility button which now launches cmd.exe as SYSTEM. Run net user username newpassword. Restore the original Utilman.exe after.
VMware (Linux guest)
Reboot and hold Shift to enter GRUB. Edit the boot entry by pressing E. Find the line starting with linux and append init=/bin/bash to the end. Press Ctrl+X to boot. You land at a root shell. Remount the filesystem as writable with mount -o remount,rw /. Run passwd username to reset. Reboot.
VirtualBox
Same process as above for both Windows and Linux guests since VirtualBox has no hypervisor level password reset tool. You are working at the guest OS level regardless.
Cloud VMs (AWS, Azure, GCP)
These have native reset mechanisms. AWS lets you detach the root volume, attach it to another instance, edit the password or SSH keys, reattach and reboot. Azure has a built in Reset Password blade in the VM settings panel that injects a new credential via the VM agent without needing console access. GCP uses OS Login or metadata SSH key injection for Linux and a similar agent based reset for Windows.
VMware ESXi managed VMs
If VMware Tools is installed you can run scripts against the guest from the hypervisor level. Without Tools you fall back to the ISO boot method.
The common thread across all of these is that physical or hypervisor level access to a machine bypasses OS authentication entirely.
This is also why full disk encryption matters. Without it anyone with access to the VM files can reset credentials exactly as described above.
If you need a more detailed tutorial, you can lookup your question on YouTube. I personally have found a lot of helpful videos regarding this.
I got bored and told ChatGPT to apply to 500 job openings for me.
Woke up, phone's blowing upβ12 interview calls within 24 hours.
This is the prompt I used:
Log Analysis π
A SOC analyst doesnβt just look for βbadβ events.
They need to understand what normal authentication, network, and endpoint activity looks like.
What log source would you prioritize when investigating a suspected compromised Windows account?
#Cybersecurity #SOC #LogAnalysis #BlueTeam