ThinkPad x395 attempt at password removal
Collapse
X
-
----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
---------------------------------------------------------------------------------------------------------------------------------------------------------------------- -
volinakis I also have a t495s laptop with a supervisor password set (I know this thread is for X395, but it's the same motherboard).
Can you please patch the attached bios dump for me so that I can try your method? S/N PC-1HF898
Thanks.Attached FilesComment
-
volinakis franklinogot The patched bios worked like a charm, I did not even have to remove the winbond chip (I used clips), clean & quick method. Thank you very much! :-)Comment
-
volinakis franklinogot The patched bios worked like a charm, I did not even have to remove the winbond chip (I used clips), clean & quick method. Thank you very much! :-)----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
volinakis I used yours (I assumed the other one uses the same mechanism).----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
Hi, I also have recently bough a x395. Can you please help me volinakis?----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
Hi file,
I have 2 laptops of model thinkpad x390. One is witg Gigadevice 1,8V BIOS chip, another is with winbond. Please to unlock.
1. Lenovo thinkpad X390, model 20NM-S0GM01 20/04, s/n PC-1GK33V. BIOS chip gigadevice 25LB128DSIG 1.8 V, original file name is "x395 GD orig 1.zip"
2. Lenovo thinkpad X390, model 20NM-S0GM01 19/12, s/n PC-1CMMX8, BIOS chip is WINBOND 25Q128FWSQ 1.8 V, original file name is "x395 wb orig 1.zip"
Thanks in advance.
Comment
-
Hi file,
I have 2 laptops of model thinkpad x390. One is witg Gigadevice 1,8V BIOS chip, another is with winbond. Please to unlock.
1. Lenovo thinkpad X390, model 20NM-S0GM01 20/04, s/n PC-1GK33V. BIOS chip gigadevice 25LB128DSIG 1.8 V, original file name is "x395 GD orig 1.zip"
2. Lenovo thinkpad X390, model 20NM-S0GM01 19/12, s/n PC-1CMMX8, BIOS chip is WINBOND 25Q128FWSQ 1.8 V, original file name is "x395 wb orig 1.zip"
Thanks in advance.Comment
-
Hi file,
I have 2 laptops of model thinkpad x390. One is witg Gigadevice 1,8V BIOS chip, another is with winbond. Please to unlock.
1. Lenovo thinkpad X390, model 20NM-S0GM01 20/04, s/n PC-1GK33V. BIOS chip gigadevice 25LB128DSIG 1.8 V, original file name is "x395 GD orig 1.zip"
2. Lenovo thinkpad X390, model 20NM-S0GM01 19/12, s/n PC-1CMMX8, BIOS chip is WINBOND 25Q128FWSQ 1.8 V, original file name is "x395 wb orig 1.zip"
Thanks in advance.Attached Files----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
----------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://www.badcaps.net/donate/
----------------------------------------------------------------------------------------------------------------------------------------------------------------------Comment
-
I have a X395 with a BIOS password. Could someone please help me to remove the password?
MTM: 20NMS1U800
unit SN: PC1KRHEL
board SN: L1HF07L02H5
X395_704.zip
In case of an E14 Gen3 the password is stored in the EC, so I attach also the EC dump of the X395:
X395_704_IT818641_192KB_CRC32_0x142F96D8.zip
Comment
-
Based on some other threads on this topic, I tried to overwrite 128 bytes with FF in the EC dump starting at 0x0002EF00.
It looks like I found the right place, but just deleting everything seems not to be enough, I get the error: Post process stopped due to bad SVP data.
Any help would be greatly appreciated.Comment
-
-
Related Topics
Collapse
-
Hey guys,
have a laptop here that has a supervisor Password (dump in Attachements).
Before i write the Serial NR.etc i wanted to say that strangely after flashing with 3 different Bios dumps and one from lenovos site
the laptop works but everytime it wants me to type a supervisor password i never set.
I thought the supervisor password is stuck in the ec bios but no it isn't either because after replacing the ec chip from one of another board it still has the supervisor password.
Anyway i wanted to ask what of the two chips is the ec bios because on the left...-
Channel: BIOS Requests ONLY!
-
-
by mferna14Hi friends., I am working on MacBook Pro A2159 touchbar 2019. The old logic board was liquid spilled so I ordered another logic board from AE. Received it & all worked fine till I got to the Chinese login screen where the login screen password tobe entered. I tried to reset the password but it again gave me options which I do not know about the Apple ID. I formatted the onboard SSD. & wanted to change the startup boot sequence but in order to change it, again the password is needed for that too. Is there a way to get rid of this password?? The seller has not replied back past 2 days, how...05-13-2025, 04:16 PM
-
by Badpatch02Hi all, I'm new here, a few words about myself: CS student, interested in hardware stuff too - tinkering my whole life but with practically no experience when it comes to firmware "hacking".
So I have this X380 Yoga with a supervisor password in place and before doing anything stupid I figured I'd rather ask.
I plan on using the tool from this thread: https://www.badcaps.net/forum/troubl...password-remov...-
Channel: BIOS Requests ONLY!
-
-
by Johnny hHello,
I'm hoping someone can assist me.
I have an Asus Vivobook 16x Pro OLED laptop which has a BIOS password, and I can't seem to find it.
It still boots into Windows (boots from whatever SSD is installed but not from USB).
The model number is M7600R and serial number is N8N0CX03H71131C.
I tried AMITSESetup Decryptor but the password I got doesn't make sense (it's got a line break and special characters).
I also tried to use *************** MOD EDIT ,redacted************** and it also gave me the funny password of
Code:tmNx\'=QJQ
-
Channel: BIOS Requests ONLY!
-
-
by coolshrimpHere is all the info you should need to remove bios password from your same model or one with an MEC-Chip and also write back the config data
T14s - MEC-1663 - Jtag - Pinout - Bios Password Removal
See Diagram for Wiring.
Use MEC-1633#ISP on your RT809h
This is same Jtag pinout and method for T490S/X390
(But your R/W 10K Resistor Location May In a Different Location)
MEC-Chips Store Bios Password In a Secure Un-Editable Area
Following steps clear that secure area to re-initialize itself to default (Blank)
...-
Channel: BIOS Requests ONLY!
-
- Loading...
- No more items.
Comment