🌩 All Your Claude Are Belong To Us: Reversing Claude Code's Remote Control Protocol

Researchers reverse-engineered Claude Code's ("claude.exe") undocumented "--sdk-url" flag, fully mapped its CCRv1 WebSocket remote control protocol (NDJSON over WebSockets), and implemented a Python C2 server. The flag accepts arbitrary URLs with no authentication, enabling post-compromise beaconing.

https://www.originhq.com/blog/reversing-remote-control

#ClaudeCode