Reversing & patching .NET applications with ILSpy & Reflexil
In the previous article, we have discussed source code review of .NET applications. Readers are introduced to a tool called Visual Code Grepper, which can help...
SecVulture
SecVulture is an Information Security professional with experience in Web, Thick client and Mobile Application Security, currently working with Infosec Institute as a researcher.
Email: secvulture@gmail.com
Automated Source Code Review for DVTA
Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App: Automated Source code review
In the previous article, we have...
Application Logs & Developer Backdoors
In the previous article, we have discussed the basics of DLL Hijacking vulnerabilities and how one can find and exploit DLL Hijacking vulnerabilities in...
DLL Hijacking using Damn Vulnerable Thick Client App
Welcome to the part 7 of Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App (DVTA). In the previous article,...
Reversing & Patching .NET Applications using Damn Vulnerable Thick Client App
Background:
In the previous article, we have discussed how .NET applications can be Reverse Engineered using dotPeek to view the source code of a .NET...
Reversing & Decrypting Database Credentials using Damn Vulnerable Thick Client App
In the previous article, we have discussed injection attacks in Thick Client Applications specifically in DVTA. In this article, we will discuss how...
Injection Attacks Using DAMN Vulnerable Thick Client App
In the previous article, we have seen some of the common data storage issues in Thick Client Applications specifically in DVTA. In this article, we will discuss...
Data Storage Issues with DAMN Vulnerable Thick Client App
Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App: Insecure Data Storage
Welcome to part-3 of thick client application...
Traffic Analysis Using DAMN Vulnerable Thick Client App
In the first part of this series, we have seen an introduction to Thick Client Applications, set up Damn Vulnerable Thick Client Application and finally performed...
Practical thick client application penetration testing using damn vulnerable thick client app: An introduction
Though, thick client applications are not new, penetration testing process for thick clients is not as straight as Web Application Penetration testing. It is...