SKIOVOX Exploit
AkaButNice, Bypassi#7037

Website GitHub Discord

Kiosk applications have their own profiles. This exploit uses a kiosk profile for Chrome browsing. Extensions can be installed from the Chrome Web Store or with Skebstore.

You can view the abandoned legacy writeup for information on this exploit.

Your Chromebook must be properly connected to a Wi-Fi network before you begin performing this exploit.

Instructions

118- 119 - 120

(There are multiple versions available)

First, sign out or restart your Chromebook to get to the login screen.
On the sign-in screen, disconnect from your Wi-Fi network.
If usernames and photos are shown on the sign-in screen, enter your password, but do not press ENTER. Otherwise, skip this step.
Launch one of your organization's kiosk applications. These can be found in the apps menu. Some kiosk applications might not work or be compatible with this exploit.
Immediately press Alt + Shift + S. A toolbar should appear.
Wait for a Network Unavailable screen to appear.
In the toolbar, open the Accessibility menu.
Click the question mark (?) button. A network error page should appear.
If a back button is available
Click Add other Wi-Fi network.
Immediately press Esc twice. The sign-in screen should appear with your password still entered.
Press Enter to sign in. This should be done within ~4 seconds of clicking Add other Wi-Fi network.
If a Multiple sign-in has been disabled message appears, press Esc to bypass it.
If there is a browsing window registered to your organization's profile, close it. There should be a clean browsing window behind it.
Open a new browsing window from the current browsing window. The new browsing window should be less bugged.
If a back button is not available
Click the Diagnose button. A diagnostics window should open invisibly.
Click Add other Wi-Fi network and wait for the diagnostics screen to appear. This step may be inconsistent. You may need to try it a few times or with other kiosk applications until it works or follow the other method for users without a back button.
Expand the Wi-Fi dropdown.
Click Open in Settings. A settings window should open.
Close the settings window. A browsing window should become focused.
If a back button is not available (ChromeVox Method)
Click Add other Wi-Fi network.
Wait until the kiosk application loads.
Press Ctrl + Alt + Z to enable ChromeVox text-to-speech. A sound may play when this shortcut is used.
While holding Search , press O, then press T.
Select Resources. Three links should appear.
Click any of the three links shown. A Chrome window should open.
Press Ctrl + Alt + Z to disable ChromeVox text-to-speech.
On the sign-in screen, disconnect from your network.
If usernames and photos are shown on the sign-in screen, enter your password, but do not press Enter. Otherwise, skip this step.
Launch one of your organization's kiosk applications. These can be found in the apps menu. Some might not work with this exploit.
Immediately press Alt + Shift + S. A toolbar should appear.
Wait for a Network Unavailable screen to appear.
In the toolbar, show the display settings menu by clicking the button next to the brightness slider.
Open display settings in the settings app by clicking the settings button in the toolbar menu.
Press Ctrl + Alt + Z to enable ChromeVox text-to-speech. A sound may play when this shortcut is used.
Select Resources. Three links should appear.
Click any of the three links shown. Chrome should open.
Press Ctrl + Alt + Z to disable ChromeVox text-to-speech.
Click sign in as an existing user.
Attempt to sign in. A Multiple sign-in has been disabled message should appear.
When the Multiple sign-in has been disabled message appears, press Esc to bypass it. A browsing window should be focused.
Close the focused browsing window.
Navigate to chrome://os-settings in the open settings window.
Connect to your network.
Close the settings window. A browsing window should be focused.
Open a new window from the Chrome panel.
Close the other browsing window.

SKIOVOX Helper

SKIOVOX Helper can restore this functionality. This does not need to be set up every time SKIOVOX is performed.

Instructions

1. Download SKIOVOX Helper from the Releases Page. If you followed the back button method in the SKIOVOX instructions, disable Ask where to save each file before downloading in the browser settings.
2. Navigate to chrome://extensions.
3. Flip and enable the Developer Mode switch on the extensions page.
4. Click Load unpacked. A file prompt should open.
5. Find the downloaded SKIOVOX Helper file.
6. In the file's context menu, select Extract all.
7. Open the extracted folder.
8. Select the file inside the folder. The SKIOVOX Helper extension should install. After installation, SKIOVOX Helper should automatically open to the keyboard shortcuts page.
9. In each shortcut input, press the keys shown in their placeholders to add emulated keyboard shortcuts.

Video Tutorials