3
... it does not "talk to the internet ...
There is a difference between does not usually talk to the internet or is not able to talk to the internet. As long as the application is not somehow sandboxed or firewalled some exploit can likely make the application talk to the internet.
... this application is a local tool only ...
Just because it runs ...
answered Apr 1 at 10:52
Steffen Ullrich
164k2424 gold badges306306 silver badges377377 bronze badges
Only top voted, non community-wiki answers of a minimum length are eligible
Related Tags
appsec × 938web-application × 342
authentication × 78
penetration-test × 72
php × 56
xss × 56
mobile × 49
encryption × 43
source-code × 42
android × 40
attacks × 38
passwords × 36
attack-prevention × 36
javascript × 35
java × 34
databases × 32
sql-injection × 31
csrf × 30
web-browser × 29
tls × 27
code-review × 27
http × 26
network × 25
cryptography × 25
windows × 24