•

visual studio code tunnel: MSFT go on and hopefully go bankrupt

Blocking Visual Studio Code embedded reverse shell before it's too late

https://ipfyx.fr/post/visual-studio-code-tunnel/

Visual studio code tunnel Introduction Since July 2023, Microsoft is offering the perfect reverse shell, embedded inside Visual Studio Code, a widely used …

Blocking Visual Studio Code embedded reverse shell before it's too late

MSFT was responsible of a generation of non-educated users, half-assed sysadmin, what could go wrong, now ?

maybe your are not concerned with your 64GB laptop from which 60GB are used for entreprise spyware/antivirus hem, protective measure. :)

5 comments

See all comments

TiphaineRupa

•

I don't really get this article to be honest.

An attacker doesn't need vscode to expose your closed off network, there are many more terminal tools that can be used for various kinds of attacks, especially if the attacker can smuggle in his own executables, as it's assumed in the post.

Neither do I like Microsoft nor vscode but to me it looks like the tunnel thingy can (and definitely should) be blocked off easily and it seems to be even documented by Microsoft.