Skip to content

All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications

Notifications You must be signed in to change notification settings

inguardians/Invoke-Clipboard

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 

Repository files navigation

Invoke-Clipboard

Invoke-Cliboard is a powershell tool for aquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#.

Invoke-Clipboard has two methods of being called; one for clipboard logging/harvesting (Invoke-ClipboardLogger) and the other for establishing a Command and Control (C2C) channel over the clipboard (Invoke-ClipboardC2C and Invoke-ClipboardC2V).

Functions

Main Functions

Invoke-ClipboardLogger - monitors the Clipboard
Invoke-ClipboardC2C - command and control over Clipboard (client)
Invoke-ClipboardC2V - command and control over Clipboard (victim)

Misc Functions

push_cb - pushes to the Clipboard
get_cb - gets whats in the Clipboard

Usage

Invoke-ClipboardLogger - Invoke-ClipboardLogger
Invoke-ClipboardC2C - Invoke-ClipboardC2C -message "gwmi -class Win32_Process"
Invoke-ClipboardC2V - Invoke-ClipboardC2V

References

Blog

About

All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published