Initial commit - 611 cybersecurity skills across all subdomains

skills/performing-thick-client-application-penetration-test/references/standards.md

@@ -0,0 +1,18 @@
+# Standards — Thick Client Application Penetration Testing
+
+## Frameworks
+- OWASP Thick Client Top 10: https://owasp.org/www-project-thick-client-top-10/
+- PTES Application Security: http://www.pentest-standard.org/
+- CWE Top 25: https://cwe.mitre.org/top25/
+
+## OWASP Thick Client Top 10
+1. Improper Platform Usage
+2. Insecure Data Storage
+3. Insecure Communication
+4. Insecure Authentication
+5. Insufficient Cryptography
+6. Insecure Authorization
+7. Client Code Quality
+8. Code Tampering
+9. Reverse Engineering
+10. Extraneous Functionality

skills/performing-thick-client-application-penetration-test/references/workflows.md

@@ -0,0 +1,26 @@
+# Workflows — Thick Client Penetration Testing
+
+## Attack Flow
+```
+Application Binary
+    │
+    ├── Static Analysis (dnSpy/Ghidra/JD-GUI)
+    │   ├── Hardcoded credentials
+    │   ├── Encryption analysis
+    │   └── API endpoint discovery
+    │
+    ├── Dynamic Analysis (Procmon/Process Hacker)
+    │   ├── File system monitoring
+    │   ├── Registry access tracking
+    │   └── Memory inspection
+    │
+    ├── Traffic Interception (Burp/Fiddler/Echo Mirage)
+    │   ├── API security testing
+    │   ├── Certificate pinning bypass
+    │   └── Authentication token analysis
+    │
+    └── Binary Exploitation
+        ├── DLL hijacking
+        ├── Memory manipulation
+        └── Binary patching
+```