---
title: "Desktop Methodologies"
description: "Desktop Penetration Testing Methodology"
canonical_url: "https://docs.cobalt.io/articles/desktop-methodologies-3qxnBKeNnE"
md_url: "https://docs.cobalt.io/articles/desktop-methodologies-3qxnBKeNnE.md"
---
# Desktop Methodologies

## **Desktop Penetration Testing Methodology**

Review Cobalt pentest methodologies for desktop applications.


:::info
Desktop penetration testing is a process in which a tester uses simulated attacks to identify potential security vulnerabilities in a desktop application.

:::

We follow an industry-standard methodology primarily based on the OWASP Desktop Application Security Verification Standard (ASVS) and Testing Guide.

## **Specific categories that are covered as part of the Pentest include:**

* Information Gathering
  * Application Architecture
  * Platform Mapping
  * Language and Framework
* Client-Side Attacks
  * Binary Analysis
  * File Analysis
  * Memory Analysis
* Network-Side Attacks
  * Installation Traffic
  * Run-Time Traffic
* Server-Side Attacks
  * TCP/UDP Attacks
  * Layer7 Attacks