Now this is something we call big & breaking. We have seen a lot of interactive kiosks around and at time we have seen the windows XP taskbar at ATM machines too and most of the time the software are old, the patches are not properly installed.
iKAT is a website which can be accessed from these kiosks to break into the machine behind the kiosk and access a lot which you were actually not intended too
Designed as a SaaS, iKAT features many methods of escaping out of a browser jailed environment and gaining command execution.
iKAT is a website you visit from a Kiosk, its quick, free, and aims to please. iKAT is solely developed by Paul Craig a Kiosk hacking enthusiast from New Zealand.
On the occasion of defcon18, iKAT has released its latest version 3.0
iKAT includes
- Java applets
- VB Scripts
- WMIs
- Activex
- OfficeKAT (Excel Spawn CMD in Memory Trick to write to local filesystem)
- SilverLight
- URI & File handler Enumeration
- Crashing the browser/Kiosk
- Spawning of CMD
- Running notepad
- Running taskmanager
- Running Regedit
- Lock Windows Workstation
And the best you don’t have to do a lot to use all these features. Just remember the URL and point the kiosk to this URL
Its as simple as http://ikat.ha.cked.net
You can try features on your local system also & understand the kind of impact this can do on a kiosk
NSFW Warning – The header contains a p0rn image which makes it dangerous to work at publicly visible kiosk & office too
As per Paul
By far the most common question i get asked is “Why do you have such
a pornographic image on iKAT?”The answer to this question is simple, iKAT makes hacking Kiosks easy
(too easy if you ask me). So I wanted to discourage people from rampaging through the streets owning every Kiosk in sight.
If you want to hack with iKAT, you need to have balls the size of bowling balls, and the gumption to have a bit of skin on screen. It seems people are more scared of being accused of looking at porn, than being accused of hacking a Kiosk!iKAT will always feature eye-catching graphics, designed to test the size of your man-hood and push the limits of your bravery.







