Difference Between Thin clients and Thick Clients
2024年8月20日 · Thin clients and thick clients are two models of client-server structure that have many differences that define their nature and application. Thin clients do not possess their own processing and data management utilities, instead depending on a central server and as such affords easy management and more security.
Pentesting Thick client Applications - Introduction - Hacking Life
2023年2月16日 · Thick clients applications are the applications that are run as standalone applications on the desktop. Thick clients have two attack surfaces: Static. Dynamic. They are quite different from web services in the sense that thick applications, most of the tasks are performed at the client end, so these apps heavily depend on client's system ...
Pentesting Java Thick Applications with Burp JDSer - NetSPI
2012年10月8日 · BurpJDSer is a Burp plugin that will deserialize/serialize Java request and response to and from XML with the help of Xtream library. BurpJDSer utilizes native Java technology to deserialize/serialize Java request, thus no additional software is required. Let’s consider this dummy Java app that communicates with a servlet via HTTP.
Vulnerable Client-Server Application (VuCSA) - GitHub
Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.
Thick Client Pentest: Modern Approaches and Techniques: PART 1
2022年9月3日 · A thick client is an application that runs on the user’s host machine/system and communicates with the backend server or database server. A few of the examples are listed below: Chrome; 2. Zoom. 3. Anydesk. 4. Skype. With respect to Architecture, they are classified as two-tier and three-tier applications.
Thick Client | CSbyGB - Pentips - GitBook
Using the proper tools, we can reverse-engineer and examine .NET and Java applications including EXE, DLL, JAR, CLASS, WAR, and other file formats. Dynamic analysis should also be performed in this step, as thick client applications store sensitive information in the memory as well. Client Side Attacks - Tools
Security Testing of Thick Client Application | by David Valles
2019年7月7日 · In this post, I’d like to share my methodology to test thick clients to find security issues. A thick client is a type of application where the bulk of processing and operations happen at...
Thick Client Penetration Testing Methodology - CyberArk
2020年2月11日 · Thick client pentesting involves both local and server-side processing and often uses proprietary protocols for communication. Simple automated assessment scanning is not sufficient and testing thick client applications requires …
thick-client · GitHub Topics · GitHub
2024年12月13日 · Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more. A website that lets the user upload his songs on a server.
Thick client penetration testing series | Part 1 - Medium
2020年6月4日 · (4.3) Java-based thick client. Now since we are familiar with the thick client application so let’s learn how to set the burp proxy in thick client application if it is sending...