Thick Client Pentest