TCASVS

OWASP Thick Client Application Security Verification Standard TCASVS Introduction The OWASP Thick Client Application Security Verification Standard TCASVS provides a comprehensive set of security requirements for designing, building, and testing thick client applications — desktop software, nativ...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

MITM_Intercept

MITMIntercept Una forma un poco menos improvisada de interceptar y modificar protocolos no HTTP a través de Burp y otros, con soporte para interceptación SSL y TLS. Esta herramienta está pensada para investigadores y testers de penetración aplicativos que realizan evaluaciones de seguridad de...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

Thick-Client-Pentest-Checklist

THICK CLIENT PENTESTING CHECKLIST OWASP Based Checklist 🌟🌟 80+ Test Cases 🚀🚀 Notion link: https://hariprasaanth.notion.site/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0 INFORMATION GATHERING Information Gathering Find out the application architecture two-tier or three-tier...

Malicious code in thick_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae0fcbb78f276aad6c55141d7943566a26ebc7b0ce9eeb13257dc5d7089ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101875

Malicious code in thickhoverflyz3n npm...

EUVD-2025-94745

Malicious code in thickalbatrossz3n npm...

EUVD-2025-94742

Malicious code in thickgalliformz3n npm...

EUVD-2025-94743

Malicious code in thickcondorz3n npm...

Malicious code in thick_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5db82281e3c87ad890255e061dc6ce1bb7d1c7f9089655950972603b9103e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75447

Malicious code in thickcapybara-appteadev npm...

EUVD-2025-78105

Malicious code in thickbatz3n npm...

Malicious code in thick_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e754cd21e9ef2933b7a9d924183d0606c01bdc3932e5f466f4d772bfa3ac721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80304

Malicious code in thickpeafowldumbs npm...

EUVD-2025-66237

Malicious code in thickfishz3n npm...

EUVD-2025-51546

Malicious code in thick-copper-bonobo npm...

Malicious code in thick-azure-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6a515c1cdeaa622ff6d65a926e5420e5fe539b6f876af84930be80aa06f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51833b183cecfb67e44f4954fcc38ce7f3186a497b732fa67f1615ba597052f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71105 Malicious code in thick-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5332104f135ae975fd2232ae0844ea4fe3ffba71e481d6834ff30bbf75e5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...