java app question

[learn lids <learnlids () yahoo com>]

hi all, 

i am looking to pen test an app which is not a webapp :) . on browsing to the url it launches a java application using 
jnlp. 

i used a network traffic sniffer to see the traffic, and it is making post requests to several different urls (e.g. 
webapp.com/generatereport etc.), and the response is of type x-serialize object. 

any suggestions on what could be things to look at for such a pentest? 

thanks


      

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------