Thick Client Application Penetration Testing