4 Types of Vulnerabilities to Test for During Every Thick Client Application Pentest

Thick applications run critical infrastructure, ingest sensitive medical records, or even play the popular music of today. They also do this all from the comfort of a client computer. Despite their important roles, thick client apps are not exempt from security vulnerabilities.

In this guide, you’ll find examples of high-level items from NetSPI’s thick application checklist as well as an overview of the vulnerabilities that NetSPI consultants often encounter during thick application pentests. Download this thick application pentesting guide to explore how to test for vulnerabilities within the following four categories:

1. GUI Interface Controls

2. Network Traffic Analysis

3. Web Service Controls

4. Sensitive Information Disclosure, Password Management, and Cryptography