Exploiting VS Code with Control Characters

A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a referrer leak and SCIM hunting. Links and vulnerability summaries for this episode are available at: [00:00:00] Introduction [00:00:57] Attacking Hypervisors - Training Update [00:06:20] Drag and Pwnd: Leverage ASCII characters to exploit VS Code [00:12:12] Full Referer URL leak through img tag [00:17:52] SCIM Hunting - Beyond SSO [00:25:17] Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages Podcast episodes are available on the usual podcast platforms: -- Apple Podcasts: -- Spotify: -- Google Podcasts: -- Other audio platforms can be found at You can also join our discord:

You can listen to Exploiting VS Code with Control Characters online on Radio and Podcast. Open the player on this page to stream the available audio.

Exploiting VS Code with Control Characters is an episode from Day[0] by dayzerosec.

This episode is 00:30:08 long.

This episode was published on May 12, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Day[0] when more episodes are available from the podcast feed.