Exploitation of Thick Client Application Vulnerabilities and a Synopsis of Mitigation: *How to Conduct Attacks to Abuse Weaknesses Present in a Windows Executable File.

Statistics show that the Windows operating system is the most widely used computer (desktop, tablet, and console) in the world with over 64% of the market share [1]. In terms of security, the more popular a software is, the more it attracts bad actors. An executable file is software that runs on a Windows machine daily by a vast number of users. It is generally used for installation purposes. However, it can also be used as a full-package application. For example, for browsing activities, remote desktop connection, video conferencing, etc. It may only require a simple double-click and entering of login details to gain access. They are also known as desktop applications, thus making them a prime target for attackers. This paper will focus on the topic of exploiting vulnerabilities mainly found in desktop applications. We will also take into account the detection of weaknesses, without which we have no clues about the target, whether it is vulnerable or not. Therefore, we will discuss how a penetration testing phase can help us ethically find any present issues from a given executable application.