Jumping out of Touch Screen Kiosks

Background:

Nowadays, the use of large touch screen kiosks has been prevalent.  They are to replace tradition paper-based brochures and to provide more interactive means to consumers. In restaurants, you can see a variety of food menu that can be accessible in large touch screen LCD monitor.  In your local Telcos, you can see a variety of mobile and Internet subscriptions plans.  

Behind these touch screen menus are running standalone or browser-mode Adobe Flash applications which are second-to-none for interactivity and scalablity and ease of update. Data could be pulled from somewhere round their centralized web severs.

Weakness: Jumping out

We cannot use iKat at first as we do not have access to any keyboard facility.
However, the trick is no-brainer.
  1. Do long press on any locations and relieve. 
  2. You should see the usual Flash context menu like:
  3. Touch "Global Settings". 
  4. A web browser window will pop up and redirect to the Adobe URL,  http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html .
  5. At this point in time, you have jumped out of the Touch Screen kiosk. You should be able to see the Window start menu and all that. 
  6. You should be able to imagine next steps on how to compromise this box. 



Comments

Popular posts from this blog

XSS: Gaining access to HttpOnly Cookie in 2012

HttpOnly Session ID in URL and Page Body | Cross Site Scripting