Kiosk Hacking: Defcon 16 Demo, iKAT & Windows XP Exploits

Last Updated on August 6, 2026 by Craig Allen Keefner

Quick Answer

The Kiosk Hacking Demonstration at Defcon 16 revealed methods to exploit vulnerabilities in kiosk systems, particularly those running Windows XP and, to some extent, Windows 7. It showcased how to bypass lockdown software like Sitekiosk and KioWare by utilizing tools such as iKAT. The demonstration highlighted various remote input vectors, including JavaScript, Java Applets, and ActiveX, which can be used to escape application jails. The iKAT tool, an online resource, is specifically designed to provide content that facilitates an escape from these application lockdown environments.

What was demonstrated in the Kiosk Hacking Demo at Defcon 16?

The Kiosk Hacking Demo at Defcon 16 provided a complete how-to guide, primarily focusing on exploiting Windows XP and, to some extent, Windows 7. It detailed the use of tools like iKAT, an online resource (ikat.h.cked.net) that provides content to facilitate escape from application jails, useful for penetration tests. The demonstration also outlined available remote input vectors such as JavaScript, Java Applets, ActiveX, ClickOnce applications, Internet Zone protocol handlers, file type handlers, and various browser plug-ins like Flash, Director, Windows Media Player, Real, QuickTime, and Acrobat.

Here is pdf of entire presentation — defcon-16-craig

The web address for iKat is ikat period h period cked period net

An online tool you visit from any Kiosk terminal.
Provides content to help an escape from any application jail.
“Sure would help me during penetration tests”

Available Remote Input Vectors:
 Remotely hosted content, viewed by a Kiosk.
 JavaScript.
 Java Applets.
 ActiveX.
 ClickOnce applications (.NET Online Application Deployment).
 Internet Zone protocol handlers.
 File type handlers.
 Flash, Director, Windows Media Player, Real, QuickTime, Acrobat, other browser plug-ins.

More Security Kiosk news

Posts 2026: 5,434

Frequently Asked Questions

1 What types of vulnerabilities were demonstrated in the Kiosk Hacking presentation?

The demonstration covered ways to exploit Windows XP and Windows 7, even when protected by lockdown software like Sitekiosk and KioWare. It highlighted the use of tools like iKAT and various remote input vectors such as JavaScript, Java Applets, ActiveX, and browser plug-ins.

2 How do hackers bypass kiosk lockdown software like Sitekiosk and KioWare?

The demonstration showed how to escape application jails, even when protected by lockdown software. It mentioned using tools like iKAT, an online tool designed to provide content that helps facilitate an escape from application lockdown environments.

3 How can the information from the Defcon 16 kiosk hacking demonstration be used for penetration testing?

The presentation content, including the iKAT tool and the detailed how-to guide, was noted as being helpful for penetration tests. It provides insights into specific methods and vectors that can be explored to identify vulnerabilities in kiosk systems.

4 What operating systems were targeted in the kiosk hacking demonstration?

The Kiosk Hacking Demonstration at Defcon 16 primarily focused on exploiting vulnerabilities in Windows XP. It also covered Windows 7 to some extent, demonstrating ways to bypass protection lockdown software on these operating systems.