Abusing VS Code's Bootstrapping Functionality To Quietly Load Malicious Extensions

Wow, been a while since my last blog 😅. During some research I came across a technique variation which I felt was interesting enough to share in a brief blog post. It relates to how the bootstrapping functionality in VS Code can be abused to quietly load plugins - it may come in handy during your initial access adventures! The Threat of VS Code Extensions It&rsquo;s no secret that the popularity…