58 matches found
CVE-2023-23397
CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...
MITM_Intercept
MITMIntercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantast...
Thick-Client-Pentest-Checklist
THICK CLIENT PENTESTING CHECKLIST OWASP Based Checklist 🌟🌟 80+ Test Cases 🚀🚀 Notion link: https://hariprasaanth.notion.site/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0 INFORMATION GATHERING Information Gathering Find out the application architecture two-tier or three-tier...
Anvil
Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...
TCASVS
OWASP Thick Client Application Security Verification Standard TCASVS Introduction The OWASP Thick Client Application Security Verification Standard TCASVS provides a comprehensive set of security requirements for designing, building, and testing thick client applications — desktop software, nativ...
dts-data__Linux-Damn-Vulnerable-Thick-Client
Linux-Damn-Vulnerable-Thick-Client A Thick client app collect...
Malicious code in thick_shrew_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae0fcbb78f276aad6c55141d7943566a26ebc7b0ce9eeb13257dc5d7089ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101875
Malicious code in thickhoverflyz3n npm...
EUVD-2025-94745
Malicious code in thickalbatrossz3n npm...
EUVD-2025-94743
Malicious code in thickcondorz3n npm...
EUVD-2025-94742
Malicious code in thickgalliformz3n npm...
Malicious code in thick_galliform_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5db82281e3c87ad890255e061dc6ce1bb7d1c7f9089655950972603b9103e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75447
Malicious code in thickcapybara-appteadev npm...
EUVD-2025-78105
Malicious code in thickbatz3n npm...
EUVD-2025-80304
Malicious code in thickpeafowldumbs npm...
Malicious code in thick_firefly_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e754cd21e9ef2933b7a9d924183d0606c01bdc3932e5f466f4d772bfa3ac721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-66237
Malicious code in thickfishz3n npm...
MAL-2025-71106 Malicious code in thick-yellow-rooster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f17db88e61b15f9b5fdfcfaea225d066c96b38cb1b10ed234a5190b0d9bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...