Offensive security

Thick Client Testing

Reverse engineering and traffic interception for desktop and legacy client-server apps.

2-tier
Client + server tested
100%
Manual reverse engineering

Security testing

In plain terms Testing

What this is

Reverse engineering and traffic interception for desktop and legacy client-server apps.

Why it can hurt you

Thick clients trust their own binary, so business logic enforced only client-side is one debugger session from bypass.

Security testing

Why it matters to you Testing

The problem

Thick clients trust their own binary, so business logic enforced only client-side is one debugger session from bypass.

Legacy risk reduction

Close gaps in software that predates modern secure-SDLC practice.

IP protection

Harden against reverse-engineering of proprietary logic.

Security testing

How we do it Testing

Binary & memory analysis

Disassembly, DLL/library inspection, in-memory secret extraction.

Traffic interception

Proxying custom protocols to test the same flaws as a web API.

Local storage review

Config files, registry keys, and local DBs checked for stored secrets.

Security testing

What we typically find Testing

Client-side authorization

Access checks enforceable only in the UI layer, bypassed by direct calls.

Hardcoded credentials

API keys or DB credentials embedded in the binary.

Insecure protocol handling

Custom protocols with no integrity or replay protection.

No scanner dump. A fixed problem.

Every finding is reproduced by hand and comes with a working proof of concept.

Security testing

What lands on your desk Testing

In-depth report

Findings with binary offsets and reproduction steps.

Protocol map

Documented client-server message flow and where it breaks.

Security testing

What you get out of it Testing

Legacy risk reduction

Close gaps in software that predates modern secure-SDLC practice.

IP protection

Harden against reverse-engineering of proprietary logic.

Security testing

Step by step Testing

1. Binary & memory analysis

Disassembly, DLL/library inspection, in-memory secret extraction.

2. Traffic interception

Proxying custom protocols to test the same flaws as a web API.

3. Local storage review

Config files, registry keys, and local DBs checked for stored secrets.

Find out what we would find.

A scoping call is thirty minutes, costs nothing, and ends with a fixed price and a date. If we are not the right people for the job, we will tell you that too.