domains / families / software-engineering / thick-client

thick-client

authentic

Authorized security testing of desktop thick clients: local storage, update channels, IPC, traffic interception, and client-side trust-boundary review.

When to use

• Assessing a desktop application's security posture.
• Checking whether client-side trust decisions can be subverted.

When not to use

• .NET/Java clients need framework-specific tooling.
• Server-side enforcement gaps found client-side still need server confirmation.

Skill page

Source