Kiosk Breakout

need physical access to the machine ; not likely in exam

GTFOBins

Linux

LOLBAS

Windows

iKAT - Interactive Kiosk Attack Tool - Paul Craig : paul <at> ha.cked.net

kiosk pentesting tool

ENVIROMENT VARIABLE	LOCATION
%ALLUSERSPROFILE%	C:\Documents and Settings\All Users
%APPDATA%	C:\Documents and Settings\Username\Application Data
%COMMONPROGRAMFILES%	C:\Program Files\Common Files
%COMMONPROGRAMFILES(x86)%	C:\Program Files (x86)\Common Files
%COMSPEC%	C:\Windows\System32\cmd.exe
%HOMEDRIVE%	C:\
%HOMEPATH%	C:\Documents and Settings\Username
%PROGRAMFILES%	C:\Program Files
%PROGRAMFILES(X86)%	C:\Program Files (x86) (only in 64-bit version)
%SystemDrive%	C:\
%SystemRoot%	C:\Windows
%TEMP% and %TMP%	C:\Documents and Settings\Username\Local Settings\Temp
%USERPROFILE%	C:\Documents and Settings\Username
%WINDIR%	C:\Windows

\\127.0.0.1\C$\Windows\System32\ = C:\Windows\System32

file:///

COMMAND	ACTION
shell:System	Opens the system folder
shell:Common	Start Menu Opens the Public Start Menu folder
shell:Downloads	Opens the current user's Downloads folder
shell:MyComputerFolder	Opens the "This PC" window, showing devices and drives for the system

Using Windows search functionality to access applications

Using help dialog to access applications

Create Shortcut and change the properties to cmd/powershell

Launch cmd with right click disabled

Using Print dialog to access Windows Explorer features

ctrl+alt+del

KEY	MENU/APPLICATION
F1	Help
Ctrl+P	Print Dialog
Altt+Tab	Task Switcher
Win+R	Run menu
Ctrl+Esc	Start Menu