Skip to content

ChrisCarini/intellij-code-exfiltration

Repository files navigation

JetBrains IntelliJ Code Exfiltration Plugin

GitHub License All Contributors GitHub Workflow Status GitHub Workflow Status

==== WARNING! ====

This plugin is for demonstration purposes only.

It is NOT intended to be used in any production / real development environment, whatsoever.

Seriously. Do not do it.

==== WARNING! ====

This plugin was written to demonstrate code exfiltration from JetBrains IntelliJ. The plugin sends an HTTP POST form request to https://localhost:8080/upload with the file and original path as part of the request.

Instructions

  1. Start the minimal upload server: cd python_post_server && python3 minimal_upload_server.py
  2. Start an IntelliJ instance with this plugin installed
  3. Open a project and file, make a change and save

Contributors

Chris Carini
Chris Carini

🐛 💻 📖 💡 🤔 🚧 💬 👀