0.0.1 • Published 5 years ago

@vside/target-practice v0.0.1

Weekly downloads
-
License
MIT
Repository
-
Last release
5 years ago

Dependency Confusion Attack Distributed via VSCode

This project demonstrates dependency confusion attack via microsoft published vscode extensions.

Quick Start

  1. start dns server: yarn dialTone
  2. mimic installation postinstall script with yarn phoneHome (update nameServers in digger.ts to refer to the correct IP address. Remember to rebuild the project for this to work)
d64dns2nodemailerts-nodetypescriptuuid
0.0.1

5 years ago