What problem does it solve? Security testers assessing desktop applications often lack a repeatable methodology, leading to missed attack surfaces like local credential storage, IPC endpoints, and update channels. This Skill provides a structured workflow for authorized thick client security testing. ## Core Features & Use Cases - Trust Boundary Mapping: Enumerate process trees, listening ports, outbound domains, and sensitive local paths such as %APPDATA%, Keychain, and the registry. - Local and Network Attack Surface Coverage: Check plaintext configs, hardcoded keys, DLL hijacking, SQLite permissions, IPC authentication, TLS pinning, and hidden admin APIs. - Reverse Engineering Routing: Direct .NET targets to dnSpy, native binaries to IDA/Ghidra, and Electron apps to asar plus JS analysis. - Use Case: Given an authorized engagement against an Electron-based desktop client, follow the checklist to intercept its traffic with Burp, extract the asar archive, and verify whether its auto-update channel validates code signatures. ## Quick Start Ask the AI to perform an authorized security assessment of a desktop thick client application covering local storage, IPC, network traffic, and update channels.
