Skip to content
All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Invoke-Clipboard.ps1
README.md

README.md

Invoke-Clipboard

Invoke-Cliboard is a powershell tool for aquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#.

Invoke-Clipboard has two methods of being called; one for clipboard logging/harvesting (Invoke-ClipboardLogger) and the other for establishing a Command and Control (C2C) channel over the clipboard (Invoke-ClipboardC2C and Invoke-ClipboardC2V).

Functions

Main Functions

Invoke-ClipboardLogger - monitors the Clipboard
Invoke-ClipboardC2C - command and control over Clipboard (client)
Invoke-ClipboardC2V - command and control over Clipboard (victim)

Misc Functions

push_cb - pushes to the Clipboard
get_cb - gets whats in the Clipboard

Usage

Invoke-ClipboardLogger - Invoke-ClipboardLogger
Invoke-ClipboardC2C - Invoke-ClipboardC2C -message "gwmi -class Win32_Process"
Invoke-ClipboardC2V - Invoke-ClipboardC2V

References

Blog

You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.