This repo contains a boilerplate configuration for setting up a Visual Studio Code server testing environment. It was created to explore functionality described in the Calif article “Vibe Hacking”: Abusing Developer Trust in Cursor and VS Code Remote Development
Setup should only require ssh key generation. If you choose not to generate a ssh key pair,
the credentials vscode:vscode can be used to login.
ssh-keygen -t ed25519 -f [KEY_NAME]After the key pair has been generated, all you have to do is copy the public key (.pub) into
config/pubkeys.
mv *.pub config/pubkeysYou should now be able to start the container and login.
The extension calif-example contains a basic proof-of-concept for command execution on the a local machine using the commands provided in the article.
workbench.action.terminal.newLocalworkbench.action.terminal.sendSequence
The extension dump-commands is meant to be a helper utility which dumps all available commands from a Visual Studio instance into a JSON file.