Thick Client Pen Testing by Qualysec Technologies

1
Thick Client Pen Testing A Comprehensive Guide
for Security Professionals
2
Introduction

• Thick client in cyber security are those that are
  installed locally on the users desktop or
  laptop. These apps are full-featured and may
  function independently of the Internet, as
  opposed to web applications, which must always be
  linked to the Internet. Examples of thick client
  applications include
• Computer games
• Web browsers
• Music Players
• Tools for video and conversation, such as Zoom,
  Slack, Teams

3
Types of Thick Client Penetration Testing
Data Storage and Privacy Testing Network
Communication Testing Code Quality
Testing Backend API Testing Injection Flaws
Authentication Issues Authorization
Issues Session Management Business Logic
Flaws Data Tampering
1.
6.
2.
7.
3.
8.
4.
9.
5.
10.
4
The Importance of Thick Client Application Testing
User Authentication and Authorization Testing
Identifying Vulnerabilities
Security Validation
Data Protection
Mitigating Business Risks
5
Penetration Testing for Thick Client
Applications
Manual Penetration Testing
Remediation Support
LOA and Certification
Planning
Reporting
Retesting
Gathering Information
Automation Scan
6
Contact us for For Thick Client Pen Testing
Services
www.qualysec.com
contact_at_qualysec.com
91 865 866 3664