recover keystrokes? password cracker for embedded security..

[nezam]

Hi,
In my other post in T-series, I said that I am having problem with BIOS supervisor password. But, it seems that I mistyped the password while setting it.

I was trying to disable chip through IBM embedded security subsystem. It prompts for BIOS supervisor password. I was just trying my password repeatedly, and one of them hit it. I went to next window, and it asked me that I need to reboot the system to enable or disable the chip. At this point I cancelled it (had read somewhere in help files abouth trouble after disabling the chip. But problem will occur only when loggin through UVM is on, and the chip is disabled). My UVM was not on, and since them I am feeling like an idiot !

Is there a way to recover keystrokes in windows, so that I will know what password I had typed?

After that, i have installed a keystroke logger and have tried the password again many times. But no luck. If I hit it again, i will know what my supervisor password is.
Can i use some kind of password cracker to try combinations of password. Its not very complex, because it is only 7 characters long, and I know most of the characters and their position but I mistyped maybe one/two keys. And yes, capslock was on when I had hit correct password. I found some password crackers, but they are built for specific applications like WinRAR,WinZip, MS Office components, windows login...etc. Is there some general cracker which can try on embedded security subsystem's password prompt.

Please give any suggestion that you have. I have been trying passwords relentlessly...knowing i am so close..but no luck again

[dvorak]

You could try some macro programs that perhaps would read a word from a file, then type it in, and check, if it had succeeded, if not, retry.

You could generate the dictionary file yourself somehow, with variations of your original password.

[doppelfish]

If you know *most* letters of the actual password, I'd suggest you make up a scheme which cycles through the remaining possibilities, and follow that with meticulous care, ticking off the non-goers. I don't doubt that brute-force password cracking tools exist, but I'd expect that the automatic brute-force approach can't beat the manual sparse semi-brute-force approach.
good lock, err, luck,
-- fish