hack Windows before even finishing setup

Item: hack Windows before even finishing setup
Rating: 4
Author: PostSingularity Institute

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer security URHComputer fraud and hacking

🎙 John Hammond 👥 2.2M 📅 August 21, 2025 ⏱ 12 min 👁 35K 📄 tutorial 🧭 2026-08-17

Available in: English (current) Français

Keywords

WindowsOOBEbreakoutadminmagnifier

Summary

In this video, John Hammond demonstrates a method to break out of the Windows Out-of-Box Experience (OOBE) and obtain an administrative command prompt before the operating system is fully set up. He starts by showing the traditional Shift+F10 trick, which opens an admin command prompt during installation, but notes that this can be disabled. He then presents a newer technique discovered by security researcher Bastian Kanbach (BKA), which involves using the Magnifier tool to create a window that allows access to the Run dialog box, even when Shift+F10 is disabled. By pressing Windows+R, typing ‘cmd.exe’, and using Ctrl+Shift+Enter, an admin command prompt can be launched in the background. The video includes a sponsor segment for AnyDesk, and John emphasizes the practical implications for IT administrators and security professionals. He credits the original researcher and provides links to the blog posts and social media profiles in the description. The video is a tutorial aimed at demonstrating a security vulnerability in the Windows setup process.

163 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable information about a lesser-known Windows OOBE breakout technique, which is useful for security researchers and IT professionals. The argumentation is clear and logical, with step-by-step demonstrations that are easy to follow. John Hammond effectively explains the limitations of the traditional Shift+F10 method and introduces the alternative using the Magnifier tool, providing a solid rationale for its relevance. The content is well-structured and the technical details are accurate, making it a valuable resource for understanding this security issue.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates high scientific rigor by crediting the original researcher, Bastian Kanbach, and providing links to his blog and social media profiles. The sources cited are relevant and directly support the content. The title accurately reflects the content, and the video stays on topic throughout. The inclusion of a sponsor segment is clearly disclosed and does not detract from the technical content. Overall, the video is well-sourced and maintains a high level of accuracy.

171 words

Title / Content Match

The title is catchy and accurately reflects the content, which shows how to gain administrative access during Windows setup.

Quality & Reliability

8/10

The video demonstrates a known technique with clear references to original research and provides practical steps. The information is accurate and well-sourced, though it is a tutorial rather than a peer-reviewed study.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Windows OOBE Breakout Revived — Original research by Bastian Kanbach detailing the Magnifier technique.
The OOBE Massacre - The Beginning of Shift+F10 — Historical context on the Shift+F10 method.
Bastian Kanbach on Bluesky — Social media profile of the researcher.
Bastian Kanbach on LinkedIn — Professional profile of the researcher.

Concurring Sources

Windows OOBE Breakout Revived — The primary source for the technique, confirming the method.
The OOBE Massacre - The Beginning of Shift+F10 — Provides historical context and supports the existence of the Shift+F10 method.

External References

Contribution & Novelties

This video brings attention to a novel technique for breaking out of the Windows OOBE, which was recently discovered and shared by security researcher Bastian Kanbach. The method leverages the Magnifier tool to access the Run dialog box, providing an alternative when Shift+F10 is disabled. This is a significant contribution to the security community as it highlights a potential attack vector during system provisioning. The video also provides practical demonstrations and clear explanations, making it accessible to a wide audience.

Pour aller plus loin :

Windows OOBE Breakout Revived — Original research with technical details.
The OOBE Massacre - The Beginning of Shift+F10 — Historical background on the Shift+F10 method.
Microsoft’s documentation on Windows Setup — Official documentation on Windows setup processes.

122 words

Radar Profile

The radar profile shows a balanced distribution across all dimensions, with slightly higher scores in information quantity and quality, reflecting the video's comprehensive coverage and accurate technical details. The lower score in technical level indicates that the content is accessible to a broad audience, while still providing valuable insights for professionals.

Reliability 8/10

💬 Positive. Sur les 30 commentaires analysés, la majorité exprime un intérêt pour la technique et remercie le créateur, avec quelques débats sur la nouveauté de la méthode.