Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic
A OWASP Based Checklist With 80+ Test Cases
Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.
Anvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security researchers conducting targeted application security assessments. It covers multiple attack classes in a single targeted run.
Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed CVSS v4.0, CWE/ATT&CK mapping, SBOM, HTML/Excel reports. PowerShell engine, GUI, MCP server and agentic AI triage.
MITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.
Burp Suite extension for authorization testing in Java serialized communication: decode, inspect, and edit serialized objects live
A website that lets the user upload his songs on a server. It was made in two versions: Pure HTML (thin Client) and Thymeleaf Rich Internet Application (thick Client)
A Thick client app for linux, designed to be vulnerable. a.k.a. Linux-Damn-Vulnerable-Thick-Client or Linux-Thick-Client-GOAT
A comprehensive reference for thick client pentesting on macOS, synthesized from CyberArk Labs research (Parts 1–3) and community writeups. Covers everything from app structure to dylib hijacking and XPC attacks
Windows MVTC Desktop application with 50 vulnerabilities across 11 categories, each wired to a built-in flag to learn.
Thick-client bug bounty learning resources — now maintained on GitBook. Windows, Electron and API thick-client pentesting guides.
🛡️ Automate penetration testing with PentestGPT, an AI-driven agent designed to enhance security assessments efficiently and effectively.
TIW (Track 4) 2022 - Project for "Technologies for the Web" course at Politecnico di Milano - Grade: 30/30
To associate your repository with the thick-client topic, visit your repo's landing page and select "manage topics."