Summary

  • This tutorial will give you a fundamental understanding of Electron-based application security testing.
  • We will start with the essentials, including installation procedures and methods to detect installed Electron apps on various operating systems, both manually and automatically using scripts.
  • After creating a .dmg file for our simple application, we will look into the/.app directory to understand its directory structure.
  • For macOS, we will use the mdfind command to perform an extensive search for .asar files and explore its basic scripts.
  • For Windows, we will examine the typical directories where applications are usually installed, such as Program Files, AppData, or WindowApp.
  • We will create a PowerShell script that can help to automate the Electron-based applications detection process.
  • Moving to Linux, we will look at the typical directories, such as /opt, /usr/share, and users’ home directories.
  • We will create a simple Python script that can help to automate the Electron-based applications detection process.

By YoKo Kho

Original Article