thick-client
ZHCheck desktop apps for misplaced trust.
What it does
Guides authorized security assessments of desktop applications across local storage, network traffic, trust boundaries, and update mechanisms.
When to use it
Use for authorized security testing of desktop GUI applications or service-associated clients, rather than purely web applications.
How to use it
Give it an authorized desktop application to assess; it works through trust boundaries, local attack surfaces, network behavior, and update security.
What you need · 5
The initial tool setup calls for Burp as an upstream proxy, alongside process-monitoring and reverse-engineering tools.
Routes reverse-engineering verification of .NET clients to dotnet-reverse; whether it must be installed to complete the workflow is unstated.
Access · 5
This skill
client network traffic
Inspects client network traffic
%APPDATA%
Inspects sensitive AppData storage