$10 programmer saves BIOS-locked Lenovo ThinkPads from the dump

$10 programmer saves BIOS-locked Lenovo ThinkPads from the dump

a]:text-inherit [&>a]:underline">
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .

Rebooted by Hileeq's channel, dedicated to fixing cheap eBay finds, documents the process and what he learned while fixing the laptops. Three weeks ago, he posted a video explaining how to bypass locked Lenovo ThinkPads with Intel 4th- to 8th-generation CPUs using a cheap CH431A programmer to read, write, erase, and save EEPROM and SPI flash memory.

Companies often add supervisor passwords to the fleet of ThinkPads they hand out to their employees as an IT security measure. When these ThinkPads are disposed of, often with the storage removed and destroyed, it’s rare that the supervisor passwords are included and documented. These locked ThinkPads are then incredibly cheap because of the lack of access, ending up as e-waste most of the time. However, Victor Voinea shared a post in a Romanian forum containing his ThinkPad supervisor removal exploits.

Unfortunately, Voinea’s method generated a random password every time the exploit was run, requiring users to contact Voinea for the key specific to the generated hardware ID — and getting the password wasn’t free. However, in 2020, Knucklegrumble posted a free way to bypass the password in the Badcaps electronics repair forum. Mark Juvan, an Ethical Hacker, reverse-engineered Knucklegrumble’s exploit as his cybersecurity master’s thesis at Radboud University Nijmegen, Netherlands, which goes into deeper detail.

Watch On The exploit begins by extracting the BIOS from the EEPROM chip on the motherboard using the CH341A programmer and plugging it into a USB port of another PC or laptop. Hileeq then uses NeoProgrammer, a utility for CH341A programmers, and dumps the BIOS, saving a copy of it on the other laptop. NeoProgrammer then applies the same auto-patching workflow Knucklegrumble created.

Nvidia crypto mining GPUs hacked to restore locked-away VRAM

Key considerations

  • Investor positioning can change fast
  • Volatility remains possible near catalysts
  • Macro rates and liquidity can dominate flows

Reference reading

More on this site

Informational only. No financial advice. Do your own research.

Leave a Comment