Threat Hunting Labs
Threat Hunting Labs is Follow the processes and files created by a VS Code extension host on a Mac, then trace what runs after the persistence loads and where the host connects.. It is ranked #393 on the Dev Radar, in Security, first seen 1 days ago and shared in 1 post (3.9k views).
Backdoored Claude Code Extension: From Editor to SSH Tunnel | Hunt Leads | Threat Hunting Labs Loading page… Threat Hunting Labs Threat Hunting Labs is a hands-on investigation training platform for threat hunters, detection engineers, incident responders, and SOC analysts. Learners investigate intrusion evidence using the kinds of search, analysis, and reporting workflows used in security operations. The platform is built around practical cases and focused Flash Hunts. Each investigation asks learners to examine telemetry, test hypotheses, follow evidence across events, and explain what happened. Guided support is available where a case…
What people said about Threat Hunting Labs on X
As promised, here’s the free Hunt Lead covering the recent Claude Code extension backdoor incident! We captured the execution chain vsCode to the outbound SSH tunnel, and turned over 10,000 endpoint events into a hands-on investigation. Check it out:…
— @Kostastsale, 1 days ago · 56 likes · see the post
Alternatives to Threat Hunting Labs
- OrcaRouter — Cyber Tier API
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- bla — 🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and…
- GitLab — and GitLab Dedicated environments have already been patched. Administrators running self-managed installations should…
Threat Hunting Labs in numbers
- Rank on the Dev Radar: #393 of 8964
- Shared in 1 post by 1 account: @Kostastsale
- 3.9k views on those posts
- First seen 1 days ago, last shared 1 days ago
- Pricing seen by AGK Intelligence: free
- Market: Security
FAQ
What is Threat Hunting Labs?
Follow the processes and files created by a VS Code extension host on a Mac, then trace what runs after the persistence loads and where the host connects. It was first shared on X 1 days ago and is ranked #393 on the Dev Radar.
Is Threat Hunting Labs free?
Yes, it is free to use.
Who shared Threat Hunting Labs?
1 account on X, including @Kostastsale, in 1 post totalling 3.9k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.4k posts from 5k X accounts over the last 21 days, 9k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-01 23:22 UTC. Full method.