> ## Documentation Index
> Fetch the complete documentation index at: https://docs.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# PREVENT-6

> Configure a strong PXE boot password

## Summary

PXE (Preboot eXecution Environment) boot passwords in ConfigMgr are a security feature to protect the PXE boot process from unauthorized access. When attempting to network boot from the PXE-enabled distribution point, the user must enter a password to access the boot media. The password is configured in the PXE settings for the distribution point (Figure 1).

<Frame caption="Figure 1 - Distribution Point PXE Settings">
  <img src="https://mintcdn.com/specteropsdocs/k1yx6gbUDEwWUifq/misconfiguration-manager-docs/defense-techniques/PREVENT/PREVENT-6/prevent-6_pxe-password.png?fit=max&auto=format&n=k1yx6gbUDEwWUifq&q=85&s=e2d467105eb2d10594e1ec4e98177ff6" alt="Distribution Point PXE Settings" width="666" height="592" data-path="misconfiguration-manager-docs/defense-techniques/PREVENT/PREVENT-6/prevent-6_pxe-password.png" />
</Frame>

This password can be retrieve using tools like [PXEThief](https://github.com/MWR-CyberSec/PXEThief) and [pxethiefy](https://github.com/csandker/pxethiefy) and subjected to offline password attacks. Therefore, it is paramount to choose a unique, strong password that can withstand cryptographic interrogation.

## Linked Defensive IDs

* [PREVENT-6: Configure a strong PXE boot password](../../../defense-techniques/PREVENT/PREVENT-6/prevent-6_description)
* [PREVENT-7: Disable command support in PXE boot configuration](../../../defense-techniques/PREVENT/PREVENT-7/prevent-7_description)
* [PREVENT-21: Restrict PXE boot to authorized VLANs](../../../defense-techniques/PREVENT/PREVENT-21/prevent-21_description)

## Associated Offensive IDs

* [CRED-1: Retrieve secrets from PXE boot media](../../../attack-techniques/CRED/CRED-1/cred-1_description)

## References

* Microsoft, [Understanding PXE Boot](https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/os-deployment/understand-pxe-boot)
* Christopher Panayi, [Identifying and Retrieving Credentials From SCCM/MECM Task Sequences](https://www.mwrcybersec.com/research_items/identifying-and-retrieving-credentials-from-sccm-mecm-task-sequences)
* Christopher Panayi, [Pulling Passwords Out of Configuration Manager](https://www.youtube.com/watch?v=Ly9goAud0gs)
* Christopher Panayi, [PXEThief](https://github.com/MWR-CyberSec/PXEThief)
* Christopher Panayi, [AES-128 ConfigMgr CryptDeriveKey Hashcat Module](https://github.com/MWR-CyberSec/configmgr-cryptderivekey-hashcat-module)
* Carsten Sandker, [pxethiefy](https://github.com/csandker/pxethiefy)