Introduction to Hacking Thick Clients: Part 3 – The File System and Registry

A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.

CVE-2026-48827: path traversal in Apache MINA SSHD's sshd-git module lets authenticated users escape the Git root via ../ to read from or push to arbitrary repositories.

APIs expose backend logic and sensitive data directly; targeted API security testing uncovers broken authentication, excessive data exposure, and access control flaws that traditional pentests miss.

This Salesforce security primer covers unintentional data exposure through unsecured SOQL in Apex code, cleartext credentials, managed package namespaces, and REST API access patterns.

The final installment of the thick client series covers memory analysis: dumping a process from Task Manager, extracting strings, and why sensitive data should use mutable types that can be wiped.

Thick client series part five covers API monitoring and invocation: API Monitor logs over 500,000 calls during login, and .NET SmokeTest lets testers load assemblies and run individual methods.