Many thick client applications are not thoroughly examined because security testing efforts are frequently focused on web and mobile applications. However, these applications could have serious security flaws like memory corruption, injection, cryptographic flaws, and client-side trust issues. These flaws can lead to complete system compromise and unauthorized access to server-side data on systems where the thick client software is installed. Thick client applications process data on both the client and server sides and use proprietary protocols to communicate. They may also contain several client-side components that operate at different levels of trust. Using simple, automated methods to scan for vulnerabilities isn’t enough. As a result, each of our thick client tests is tailored specifically for the application.