<summary><strong>Learn AWS hacking from zero to hero with</strong><ahref="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary>
Other ways to support HackTricks:
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/hacktricks_live)**.**
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
[**WhiteIntel**](https://whiteintel.io) is a **dark-web** fueled search engine that offers **free** functionalities to check if a company or its customers have been **compromised** by **stealer malwares**.
Their primary goal of WhiteIntel is to combat account takeovers and ransomware attacks resulting from information-stealing malware.
You can check their website and try their engine for **free** at:
# Check for possible actions inside the GUI application
**Common Dialogs** are those options of **saving a file**, **opening a file**, selecting a font, a color... Most of them will **offer a full Explorer functionality**. This means that you will be able to access Explorer functionalities if you can access these options:
* Close/Close as
* Open/Open with
* Print
* Export/Import
* Search
* Scan
You should check if you can:
* Modify or create new files
* Create symbolic links
* Get access to restricted areas
* Execute other apps
## Command Execution
Maybe **using a `Open with`** option** you can open/execute some kind of shell.
### Windows
For example _cmd.exe, command.com, Powershell/Powershell ISE, mmc.exe, at.exe, taskschd.msc..._ find more binaries that can be used to execute commands (and perform unexpected actions) here: [https://lolbas-project.github.io/](https://lolbas-project.github.io)
### \*NIX __
_bash, sh, zsh..._ More here: [https://gtfobins.github.io/](https://gtfobins.github.io)
# Windows
## Bypassing path restrictions
* **Environment variables**: There are a lot of environment variables that are pointing to some path
* CTRL+ALT+DEL – Splash screen on newer Windows versions
* F1 – Help F3 – Search
* F6 – Address Bar
* F11 – Toggle full screen within Internet Explorer
* CTRL+H – Internet Explorer History
* CTRL+T – Internet Explorer – New Tab
* CTRL+N – Internet Explorer – New Page
* CTRL+O – Open File
* CTRL+S – Save CTRL+N – New RDP / Citrix
## Swipes
* Swipe from the left side to the right to see all open Windows, minimizing the KIOSK app and accessing the whole OS directly;
* Swipe from the right side to the left to open Action Center, minimizing the KIOSK app and accessing the whole OS directly;
* Swipe in from the top edge to make the title bar visible for an app opened in full screen mode;
* Swipe up from the bottom to show the taskbar in a full screen app.
## Internet Explorer Tricks
### 'Image Toolbar'
It's a toolbar that appears on the top-left of image when it's clicked. You will be able to Save, Print, Mailto, Open "My Pictures" in Explorer. The Kiosk needs to be using Internet Explorer.
### Shell Protocol
Type this URLs to obtain an Explorer view:
*`shell:Administrative Tools`
*`shell:DocumentsLibrary`
*`shell:Libraries`
*`shell:UserProfiles`
*`shell:Personal`
*`shell:SearchHomeFolder`
*`shell:NetworkPlacesFolder`
*`shell:SendTo`
*`shell:UserProfiles`
*`shell:Common Administrative Tools`
*`shell:MyComputerFolder`
*`shell:InternetFolder`
*`Shell:Profile`
*`Shell:ProgramFiles`
*`Shell:System`
*`Shell:ControlPanelFolder`
*`Shell:Windows`
*`shell:::{21EC2020-3AEA-1069-A2DD-08002B30309D}` --> Control Panel
*`shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}` --> My Computer
*`shell:::{{208D2C60-3AEA-1069-A2D7-08002B30309D}}` --> My Network Places
*`shell:::{871C5380-42A0-1069-A2EA-08002B30309D}` --> Internet Explorer
## Show File Extensions
Check this page for more information: [https://www.howtohaven.com/system/show-file-extensions-in-windows-explorer.shtml](https://www.howtohaven.com/system/show-file-extensions-in-windows-explorer.shtml)
* Swipe up with four (or five) fingers / Double-tap Home button: To view the multitask view and change App
* Swipe one way or another with four or five fingers: In order to change to the next/last App
* Pinch the screen with five fingers / Touch Home button / Swipe up with 1 finger from the bottom of the screen in a quick motion to the up: To access Home
* Swipe one finger from the bottom of the screen just 1-2 inches (slow): The dock will appear
* Swipe down from the top of the display with 1 finger: To view your notifications
* Swipe down with 1 finger the top-right corner of the screen: To see iPad Pro's control centre
* Swipe 1 finger from the left of the screen 1-2 inches: To see Today view
* Swipe fast 1 finger from the centre of the screen to the right or left: To change to next/last App
* Press and hold the On/**Off**/Sleep button at the upper-right corner of the **iPad +** Move the Slide to **power off** slider all the way to the right: To power off
* Press the On/**Off**/Sleep button at the upper-right corner of the **iPad and the Home button for a few second**: To force a hard power off
* Press the On/**Off**/Sleep button at the upper-right corner of the **iPad and the Home button quickly**: To take a screenshot that will pop up in the lower left of the display. Press both buttons at the same time very briefly as if you hold them a few seconds a hard power off will be performed.
## Shortcuts
You should have an iPad keyboard or a USB keyboard adaptor. Only shortcuts that could help escaping from the application will be shown here.
| Key | Name |
| --- | ------------ |
| ⌘ | Command |
| ⌥ | Option (Alt) |
| ⇧ | Shift |
| ↩ | Return |
| ⇥ | Tab |
| ^ | Control |
| ← | Left Arrow |
| → | Right Arrow |
| ↑ | Up Arrow |
| ↓ | Down Arrow |
### System shortcuts
These shortcuts are for the visual settings and sound settings, depending on the use of the iPad.
[**WhiteIntel**](https://whiteintel.io) is a **dark-web** fueled search engine that offers **free** functionalities to check if a company or its customers have been **compromised** by **stealer malwares**.
Their primary goal of WhiteIntel is to combat account takeovers and ransomware attacks resulting from information-stealing malware.
You can check their website and try their engine for **free** at:
<summary><strong>Learn AWS hacking from zero to hero with</strong><ahref="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary>
Other ways to support HackTricks:
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/hacktricks_live)**.**
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
