Windows 11 Disk Wiper

This Windows 11 VM has been modified to replace the audit mode with a simple script which wipes the partition table. On a physical machine, any binary that can be run as administrator can be replaced with something malicious using an alternative boot media in several minutes. To wipe the disk, wait for the OOBE to appear, and press control shift f3 to enter audit mode. On a normal windows install, audit mode is used to prepare machines for imaging. On this VM, however, the partition table of disk 0 will be cleared, preparing the machine for an OS reinstall instead.

A script to reconstruct this setup can be found here. It takes the full path to a windows ISO as its argument."

Host Console