As far as I could see, I didn’t find a direct guide on how to break out of kiosks the way I did it, thus the reason I made this blog post. I have to admit, I struggled quite hard to get the eventual code execution on the underlying host, but I was quite happy that I got there by using creative thinking. The main idea of a kiosk is that users should not be able to do anything else on the machine, except for using the hosted application(s) in their intended way. a reception booth with a screen where guests can register their arrival at a company). Maybe a little bit of explanation of what a kiosk is for those that don’t know, a kiosk is basically a machine that hosts one or more applications for users with physical access to the machine to use (e.g.

Now, I know that there are many resources out there for breaking out of kiosks and that in general it can be quite easy, but this technique was a first for me. In this blog post, I will take you through the steps that I performed to get code execution on a Windows kiosk host using ONLY Microsoft Edge.

Microsoft edge app mode