Question and answer from VMware community on configuring kiosk mode and thin client. View Kiosk Mode with Zero Client – Auto login myvdi (1 posts since Jul 7, 2014) Jul 7, 2014 2:20 PM We are looking to use a zero client to provide guest internet access and are currently testing various configurations. We currently have a zero… Read More »
RT @m3g9tr0n: Pwning a thin client in less than two minuteshttps://t.co/Y9FK57uVy2Source: blog.malerisch.netNormally, HP ThinPro OS interface is configured in a kiosk mode, as the concept of a thin/zero client is based on using a thick client to connect to another resource. For this purpose, a standard user does not need to authenticate to the thin client per se and would just need to perform a connection – e.g. VMware Horizon View. The user will eventually authenticate through the connection. The point of this blog post is to demonstrate that a malicious actor can compromise such thin clients in a trivial and quick way provided physical access, a standard prerequisite in an attack against a kiosk.
Tutorial on breaking and entering a thin client configured for kiosk mode.