Comments on: Security weaknesses in airport internet kiosks

By: Security Ninja

Security Ninja — Wed, 10 Nov 2010 09:11:23 +0000

Hi Paul,

Thanks for leaving a comment on this blog post, it is nice to see a vendor taking security seriously and trying to address some of the issues you have found with iKAT.

Angel

By: Paul Craig

Paul Craig — Wed, 10 Nov 2010 08:08:24 +0000

Provisio (SiteKiosk guys) take their security rather seriously, and all of the newer versions actively try to fix all the bugs i have found and published in iKAT (which use to get shell)
Local USB devices are a great way of getting in though as they will not fall under the host-hardening performed by SiteKiosk installs.

FAT formatted USB disk with Metasploit or iKAT Portable would do the job very easily.

By: Angel

Angel — Tue, 19 Oct 2010 09:14:11 +0000

Thanks for your comment Brian.

I have in mind to test the tool you have commented with the SiteKiosk software in my lab.

Angel.

By: Brian Honan

Brian Honan — Thu, 23 Sep 2010 11:27:50 +0000

Angel

You should look at Paul Craig’s Interactive Kiosk Attack Tool IKAT at http://ikat.ha.cked.net

Brian