← Back to feed
research PortSwigger Research

Drag and Pwnd: Leverage ASCII characters to exploit VS Code

PortSwigger Research

Control characters like SOH, STX, EOT and ETX were never meant to run your code - but in the world of modern terminal emulators, they sometimes do.

Read the full story PortSwigger Research →

Related Coverage

research What's in a tag name? JavaScript, apparently PortSwigger Research · Aug 25 research State divergence enables unauthorized access Trail of Bits · Aug 25 research The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution Unit 42 · Aug 25