![]() ![]() Escaping Browser Restrictionsįirst things first, it would be nice to escape the restricted Microsoft Edge browser so we can at least have some breathing room and more options available to us. More information about the restrictions can be found here. Furthermore, the Microsoft Edge browser in Windows Kiosk Mode is also restricted in several ways, which means that we can’t tamper with the settings or configurations. I’ll show an example later on.Īs you can see, there is no internet access either, so we can’t simply browse to a kiosk pwning website to get an easy win. In this configuration, there is a URL bar and a keyboard available, which makes the kiosk escape quite a bit easier, but there are plenty of breakout tactics even without access to the URL bar. I’m not going to detail how to set up a kiosk in this blog post, but here’s a nice little video on Youtube on how to set one up yourself. To start things off, I set up my own little Windows Kiosk in a virtual machine. At the very end, I will also show a quick and easy breakout that I found in a John Hammond video. As far as I could see, I didn’t find a direct guide on how to break out of kiosks the way I did it, thus the reason I made this blog post. I have to admit, I struggled quite hard to get the eventual code execution on the underlying host, but I was quite happy that I got there by using creative thinking. The main idea of a kiosk is that users should not be able to do anything else on the machine, except for using the hosted application(s) in their intended way. a reception booth with a screen where guests can register their arrival at a company). Maybe a little bit of explanation of what a kiosk is for those that don’t know, a kiosk is basically a machine that hosts one or more applications for users with physical access to the machine to use (e.g. ![]() Now, I know that there are many resources out there for breaking out of kiosks and that in general it can be quite easy, but this technique was a first for me. In this blog post, I will take you through the steps that I performed to get code execution on a Windows kiosk host using ONLY Microsoft Edge. ![]()
0 Comments
Leave a Reply. |