Tip:
Highlight text to annotate it
X
Hello everyone. Let's say you don't want to pay 15 dollars just to browse on the web or you just want to download a file quickly.
I'm going to teach you how to exploit this specific kind of kiosk here. The most you'll have to do is use the task manager.
First off, Nothing here is going to work unless there's a way to get to Google or hotlink to a specific site. Right now I am navigating to WestJet Canada...
...Which I can use to get to Twitter...
...Then search for Google.com...
And to the Interactive Kiosk Attack Tool.
Now the result we get is the one for Linux. We want the one for Windows.
As you can see, there are a whole slew of tools at our disposal including a "1Click PWN". We don't need that for this tutorial.
For now, follow what I am doing.
If you're going to be doing this a lot I suggest taking the link to the Java applet and putting it on Twitter or something.
So, we have explorer.exe up. We don't need the browser anymore.
Go to Start, then Run. You're not going to see the window but typing still works.
When you enter the command, you will be at the desktop with no admin privileges and the program will attempt to launch itself again. Follow me quickly.
As you can see, the csrss I just clicked on allowed me to launch the task manager.
For convenience, I have already killed SQ_Startup before recording.
The tray icons will be missing. Just do this to get them back...
Click Show Tray Icons, Kill the csrss.exe, launch it again, and kill it again.
A Kiosk like this might have something like DeepFreeze installed, so restarting the computer reverts the changes.
One last thing before I leave...
Ah there we go. Thanks for watching.