# VS Code

## Extensions

* <https://www.mdsec.co.uk/2023/08/leveraging-vscode-extensions-for-initial-access/>
* <https://www.mdsec.co.uk/2021/01/macos-post-exploitation-shenanigans-with-vscode-extensions/>
* <https://xakep.ru/2023/10/03/macos-lpe/>
* \[<https://casvancooten.com/posts/2025/02/abusing-vs-codes-bootstrapping-functionality-to-quietly-load-malicious-extensions/]https://casvancooten.com/posts/2025/02/abusing-vs-codes-bootstrapping-functionality-to-quietly-load-malicious-extensions/()>

## Tunneling

* <https://badoption.eu/blog/2023/01/31/code_c2.html>
