Test desktop application security across local storage, communication between processes, network traffic, and update channels. Map where trust and permissions change, then investigate weaknesses in credentials, access checks, and update verification.
中文简介正在准备中。当前显示英语简介。
Use for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.
安装前可以查看交给 AI 代理的指令内容。
NOW: 读取 ../field-journal/precedent-pentest.mdNOW: 确认目标是 桌面厚客户端（Win/macOS/Linux GUI 或服务伴生），非纯 WebNOW: case-init；安装包来源与测试账号写入 scopeNEXT: 工具（Burp 上游代理、进程监控、逆向工具）ACT: 信任边界图 → 本地面 → 网络面 → 更新/供应链□ 进程树、子进程、驱动/服务
□ 监听端口与出站域名
□ 本地敏感路径：%APPDATA%、Keychain、注册表
□ 明文配置、硬编码密钥、调试开关
□ DLL 劫持/搜索顺序（Windows）
□ 数据库文件（SQLite）权限与加密
□ IPC：谁可连接？是否鉴权？
□ 系统代理 / 应用自定义 TLS
□ 证书钉扎 → 联合 mobile/js 方法学或 Frida
□ API 越权：客户端隐藏的管理接口
□ .NET → dotnet-reverse；原生 → ida/ghidra；Electron → asar + js-reverse
| 工具 | 用途 |
|---|---|
| Process Monitor / API Monitor | 行为 |
| Burp / mitmproxy | 流量 |
| dnSpy / IDA / Ghidra | 逆向 |
| Sysinternals | Windows 面 |
| asar / nexe 检测 | Electron |
references/thick-client-checklist.md../dotnet-reverse/ ../ida-reverse/ ../js-reverse/ ../api-security/上游: MASTER R32
下游: 纯协议 protocol-reverse；供应链更新 supply-chain-security
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Assess authorized APIs through a ten-stage workflow covering endpoint discovery, authentication, access permissions, input handling, and request limits. Collect reproducible evidence and turn findings into regression checks that can run in a development pipeline.
中文简介正在准备中。当前显示英语简介。
Inspect Android APKs from the command line to understand app logic, permissions, and components. Supports Java decompilation, low-level code edits, rebuilding and signing, plus Frida observation of running methods and routing to native code analysis.
中文简介正在准备中。当前显示英语简介。
Plan and coordinate authorized penetration tests across multiple stages, from reconnaissance to access, privilege escalation, movement between systems, and impact assessment. Assign specialist skills, revise blocked paths, and maintain evidence and progress records for the final report.
中文简介正在准备中。当前显示英语简介。
Transfer known function and variable names from an older binary to a newer version. Compare disassembly and pseudocode with an LLM, produce structured mappings, and apply names and comments in IDA.
中文简介正在准备中。当前显示英语简介。
Inspect compiled programs in Binary Ninja using strings, function references, and intermediate representations—views of program logic at different levels. Trace data flow and report findings with addresses, supporting evidence, confidence, and reproduction steps.
中文简介正在准备中。当前显示英语简介。
Automate website navigation, form filling, content collection, and Windows desktop interactions. The skill selects browser or desktop tools for the task and guides screenshot capture and desktop network traffic observation when needed.
中文简介正在准备中。当前显示英语简介。