{"id":13589445,"url":"https://github.com/Hari-prasaanth/Thick-Client-Pentest-Checklist","last_synced_at":"2025-04-08T09:32:54.177Z","repository":{"id":38447525,"uuid":"505276541","full_name":"Hari-prasaanth/Thick-Client-Pentest-Checklist","owner":"Hari-prasaanth","description":"A OWASP Based Checklist With 80+ Test Cases","archived":false,"fork":false,"pushed_at":"2022-10-26T01:14:33.000Z","size":1250,"stargazers_count":131,"open_issues_count":0,"forks_count":38,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-11-06T09:39:43.112Z","etag":null,"topics":["checklist","penetration-testing","penetration-testing-framework","pentesting","thick-client","thin-client"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Hari-prasaanth.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-06-20T03:00:51.000Z","updated_at":"2024-10-26T05:04:37.000Z","dependencies_parsed_at":"2022-09-05T03:40:57.305Z","dependency_job_id":null,"html_url":"https://github.com/Hari-prasaanth/Thick-Client-Pentest-Checklist","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hari-prasaanth%2FThick-Client-Pentest-Checklist","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hari-prasaanth%2FThick-Client-Pentest-Checklist/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hari-prasaanth%2FThick-Client-Pentest-Checklist/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hari-prasaanth%2FThick-Client-Pentest-Checklist/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Hari-prasaanth","download_url":"https://codeload.github.com/Hari-prasaanth/Thick-Client-Pentest-Checklist/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247814216,"owners_count":21000522,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["checklist","penetration-testing","penetration-testing-framework","pentesting","thick-client","thin-client"],"created_at":"2024-08-01T16:00:30.264Z","updated_at":"2025-04-08T09:32:53.338Z","avatar_url":"https://github.com/Hari-prasaanth.png","language":null,"funding_links":[],"categories":["General cheat sheets"],"sub_categories":[],"readme":"# THICK CLIENT PENTESTING CHECKLIST\n\n**OWASP Based Checklist  🌟🌟**\n\n**80+ Test Cases 🚀🚀**\n\nNotion link: https://hariprasaanth.notion.site/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0\n\u003c/br\u003e\u003c/br\u003e\n\n- **INFORMATION GATHERING**\n    \n    **Information Gathering**\n    \n    - [ ]  Find out the application architecture (two-tier or three-tier)\n    - [ ]  Find out the technologies used (languages and frameworks)\n    - [ ]  Identify network communication\n    - [ ]  Observe the application process\n    - [ ]  Observe each functionality and behavior of the application\n    - [ ]  Identify all the entry points\n    - [ ]  Analyze the security mechanism (authorization and authentication)\n    \n    **Tools Used**\n    \n    - [ ]  CFF Explorer\n    - [ ]  Sysinternals Suite\n    - [ ]  Wireshark\n    - [ ]  PEid\n    - [ ]  Detect It Easy (DIE)\n    - [ ]  Strings\n    \n- **GUI TESTING**\n    \n    **Test For GUI Object Permission**\n    \n    - [ ]  Display hidden form object\n    - [ ]  Try to activate disabled functionalities\n    - [ ]  Try to uncover the masked password\n    \n    **Test GUI Content**\n    \n    - [ ]  Look for sensitive information\n    \n    **Test For GUI Logic**\n    \n    - [ ]  Try for access control and injection-based vulnerabilities\n    - [ ]  Bypass controls by utilizing intended GUI functionality\n    - [ ]  Check improper error handling\n    - [ ]  Check weak input sanitization\n    - [ ]  Try privilege escalation (unlocking admin features to normal users)\n    - [ ]  Try payment manipulation\n    \n    **Tools Used**\n    \n    - [ ]  UISpy\n    - [ ]  Winspy++\n    - [ ]  Window Detective\n    - [ ]  Snoop WPF\n    \n- **FILE TESTING**\n    \n    **Test For Files Permission**\n    \n    - [ ]  Check permission for each and every file and folder\n    \n    **Test For File Continuity**\n    \n    - [ ]  Check strong naming\n    - [ ]  Authenticate code signing\n    \n    **Test For File Content Debugging**\n    \n    - [ ]  Look for sensitive information on the file system (symbols, sensitive data, passwords, configurations)\n    - [ ]  Look for sensitive information on the config file\n    - [ ]  Look for Hardcoded encryption data\n    - [ ]  Look for Clear text storage of sensitive data\n    - [ ]  Look for side-channel data leakage\n    - [ ]  Look for unreliable log\n    \n    **Test For File And Content Manipulation**\n    \n    - [ ]  Try framework backdooring\n    - [ ]  Try DLL preloading\n    - [ ]  Perform Race condition check\n    - [ ]  Test for Files and content replacement\n    - [ ]  Test for Client-side protection bypass using reverse engineering\n    \n    **Test For Function Exported**\n    \n    - [ ]  Try to find the exported functions\n    - [ ]  Try to use the exported functions without authentication\n    \n    **Test For Public Methods**\n    \n    - [ ]  Make a wrapper to gain access to public methods without authentication\n    \n    **Test For Decompile And Application Rebuild**\n    \n    - [ ]  Try to recover the original source code, passwords, keys\n    - [ ]  Try to decompile the application\n    - [ ]  Try to rebuild the application\n    - [ ]  Try to patch the application\n    \n    **Test For Decryption And DE obfuscation**\n    \n    - [ ]  Try to recover original source code\n    - [ ]  Try to retrieve passwords and keys\n    - [ ]  Test for lack of obfuscation\n    \n    **Test For Disassemble and Reassemble**\n    \n    - [ ]  Try to build a patched assembly\n    \n    **Tools Used**\n    \n    - [ ]  Strings\n    - [ ]  dnSpy\n    - [ ]  Procmon\n    - [ ]  Process Explorer\n    - [ ]  Process Hacker\n    \n- **REGISTRY TESTING**\n    \n    **Test For Registry Permissions**\n    \n    - [ ]  Check read access to the registry keys\n    - [ ]  Check to write access to the registry keys\n    \n    **Test For Registry Contents**\n    \n    - [ ]  Inspect the registry contents\n    - [ ]  Check for sensitive info stored on the registry\n    - [ ]  Compare the registry before and after executing the application\n    \n    **Test For Registry Manipulation**\n    \n    - [ ]  Try for registry manipulation\n    - [ ]  Try to bypass authentication by registry manipulation\n    - [ ]  Try to bypass authorization by registry manipulation\n    \n    **Tools Used**\n    \n    - [ ]  Regshot\n    - [ ]  Procmon\n    - [ ]  Accessenum\n    \n- **NETWORK TESTING**\n    \n    **Test For Network**\n    \n    - [ ]  Check for sensitive data in transit\n    - [ ]  Try to bypass firewall rules\n    - [ ]  Try to manipulate network traffic\n    \n    **Tools Used**\n    \n    - [ ]  Wireshark\n    - [ ]  TCPview\n    \n- **ASSEMBLY TESTING**\n    \n    **Test For Assembly**\n    \n    - [ ]  Verify Address Space Layout Randomization (ASLR)\n    - [ ]  Verify SafeSEH\n    - [ ]  Verify Data Execution Prevention (DEP)\n    - [ ]  Verify strong naming\n    - [ ]  Verify ControlFlowGuard\n    - [ ]  Verify HighentropyVA\n    \n    **Tools Used**\n    \n    - [ ]  PESecurity\n    \n- **MEMORY TESTING**\n    \n    **Test For Memory Content**\n    \n    - [ ]  Check for sensitive data stored in memory\n    \n    **Test For Memory Manipulation**\n    \n    - [ ]  Try for memory manipulation\n    - [ ]  Try to bypass authentication by memory manipulation\n    - [ ]  Try to bypass authorization by memory manipulation\n    \n    **Test For Run Time Manipulation**\n    \n    - [ ]  Try to analyze the dump file\n    - [ ]  Check for process replacement\n    - [ ]  Check for modifying assembly in the memory\n    - [ ]  Try to debug the application\n    - [ ]  Try to identify dangerous functions\n    - [ ]  Use breakpoints to test each and every functionality\n    \n    **Tools Used**\n    \n    - [ ]  Process Hacker\n    - [ ]  HxD\n    - [ ]  Strings\n    \n- **TRAFFIC TESTING**\n    \n    **Test For Traffic**\n    \n    - [ ]  Analyze the flow of network traffic\n    - [ ]  Try to find sensitive data in transit\n    \n    **Tools Used**\n    \n    - [ ]  Echo Mirage\n    - [ ]  MITM Relay\n    - [ ]  Burp Suite\n    \n- **COMMON VULNERABILITIES TESTING**\n    \n    **Test For Common Vulnerabilities**\n    \n    - [ ]  Try to decompile the application\n    - [ ]  Try for reverse engineering\n    - [ ]  Try to test with OWASP WEB Top 10\n    - [ ]  Try to test with OWASP API Top 10\n    - [ ]  Test for DLL Hijacking\n    - [ ]  Test for signature checks (Use Sigcheck)\n    - [ ]  Test for binary analysis (Use Binscope)\n    - [ ]  Test for business logic errors\n    - [ ]  Test for TCP/UDP attacks\n    - [ ]  Test with automated scanning tools (Use Visual Code Grepper - VCG)\n\n### Shaped by: Hariprasaanth R\n\n**Reach Me: [LinkedIn](https://www.linkedin.com/in/hariprasaanth) [Portfolio](https://hariprasaanth.blogspot.com/) [Github](https://github.com/Hari-prasaanth)**\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FHari-prasaanth%2FThick-Client-Pentest-Checklist","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FHari-prasaanth%2FThick-Client-Pentest-Checklist","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FHari-prasaanth%2FThick-Client-Pentest-Checklist/lists"}