Browsing: thick client application security testing