Penetration Testing
VDI, Citrix and Kiosk Breakout Testing
We test your restricted sessions, such as branch terminals, call center desktops and kiosks. We show whether these sessions can be escaped to access the underlying system or internal network.
What it is
Restricted sessions are designed to provide users access only to specific applications. These VDI, Citrix or kiosk environments are often accessible to supplier and outsourced teams. The test checks if a user can bypass these restrictions to reach the operating system or network. If a breakout is possible, the test shows where it leads within the internal network.
Scope
- Resilience of published applications and session restrictions
- Permissions from the session to local drives, clipboard and printers
- Physical ports and management interfaces of kiosk devices
- Access from the session to the internal network and other users' sessions
- Authentication and management layer of the VDI and Citrix infrastructure
The need
When organizations need it
- When you provide call center or back-office operations to an outsourced team through VDI.
- Before deploying new kiosks and self-service devices in branches, stores or public areas.
- When suppliers are allowed to access internal systems only via Citrix or remote desktop.
Method
How we work
-
Scope
We define the session profiles, devices and user roles to be tested.
-
Restriction analysis
We identify which applications, files and network resources are accessible from the session.
-
Breakout attempt
We attempt to bypass restrictions to access the underlying system. If successful, we show where access is possible on the internal network.
-
Report and retest
We report the configuration changes that strengthen the restrictions, then retest.
Outcome
What you have at the end
You know if your restricted sessions are truly restricted and where a breakout leads in the internal network. You receive prioritized session and device configuration fixes.
Frequently asked questions
Are kiosk tests performed on site?
Usually performed on a sample device, either in your environment or in a lab. If the field setup differs, an on-site check at one location is included.
Is the Citrix or VDI infrastructure itself tested?
The access layer and authentication can be included in scope. Product vulnerabilities in the infrastructure are also addressed in external and internal network penetration tests.
Penetration Testing
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting