Post

Funs With Windows Escaping Kiosk

TLDR Techniques

1
2
3
4
5
6
CTRL + s
CTRL + o
CTRL + p
Windows + r
CTRL + SHIFT + Escape (Task Manager)
runas /user:admin cmd.exe (For Priv Esc if admin pass is known)

Setup

Messing With F1 button

Messing with Copilot

Messing with the news

Right Clicking

Conclusion

With the ability to spawn cmd shell , a persistence can be installed or even priviledge escalation is possible if its required.

This post is licensed under CC BY 4.0 by the author.