Skill UI

A comprehensive guide for building robust, production-grade desktop applications using Electron. This skill covers advanced topics including multi-process architecture, mandatory security hardening (contextIsolation, sandbox), secure IPC communication, and best practices for packaging, code signing, and implementing auto-update features.

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.