↓Skip to main content
  1. Red team/
  2. Initial Access/
  3. Phising && Spearphishing/
  4. VScode/

Remote SSH

·1 min·
Redteam Ssh Phishing Vscode Remote-Access
Broder
Author
Broder
Only the ones who have a true passion for mastering security truly stand out.
Table of Contents

Scenarios
#

Update: Mauro Soria pointed out that this attack vector can be easily adapted for phishing scenarios:

  1. Share a GitHub repo

  2. Give some instructions to access the attacker server with Cursor or VS Code.

POC
#

poc

References
#

“Vibe Hacking”: Abusing Developer Trust in Cursor and VS Code Remote Development

VsCodeExtLure

Related

Marco
·4 mins
Redteam Phishing Office365 C2
LLMNR/NBT-NS Poisoning and SMB Relay
·3 mins
Redteam Credential Access Exploit Chain SMB LLMNR NBT-NS NTLM Relay WinRM
Artificial
·4 mins
HTB Machines
Compress
·5 mins
CTF Exploitation Pwn Write-Up Heap Unlink-Attack
Race Condition
13 mins
CTF Exploitation Operating Systems Vulnerability Analysis
pwnable.tw
·10 mins
CTF Exploitation Pwn Write-Up