https://github.com/controlplaneio/research-vscode

Results of Kevin & Fabian's R&D week on VSCode security
https://github.com/controlplaneio/research-vscode

Last synced: 7 months ago
JSON representation

Results of Kevin & Fabian's R&D week on VSCode security

• Host: GitHub
• URL: https://github.com/controlplaneio/research-vscode
• Owner: controlplaneio
• License: apache-2.0
• Created: 2024-06-03T10:13:45.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-09-11T10:09:53.000Z (almost 2 years ago)
• Last Synced: 2024-09-17T13:10:20.067Z (almost 2 years ago)
• Language: TypeScript
• Homepage:
• Size: 441 KB
• Stars: 2
• Watchers: 7
• Forks: 0
• Open Issues: 3
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Codeowners: .github/CODEOWNERS
  • Security: SECURITY.md

Awesome Lists containing this project

README

          
# VSCode Extensions Research

A repository for researching the security of Visual Studio Code extensions. It includes proof of concept code to demonstrate how an adversary can leverage a malicious extension to access local and remote systems.

## Current Examples

- [Steal Credentials Extension](./steal-credentials/)

## Literature

- [Abusing VSCode: From Malicious Extensions to Stolen Credentials (Part 1)](https://control-plane.io/posts/abusing-vscode-from-malicious-extensions-to-stolen-credentials-part-1/)

- [Abusing VSCode: From Malicious Extensions to Stolen Credentials (Part 2)](https://control-plane.io/posts/abusing-vscode-from-malicious-extensions-to-stolen-credentials-part-2/)

---

With ❤ from [ControlPlane](https://control-plane.io/)