By Adam Crompton, Senior Security Consultant, InGuardians<\/p>\n

Invoke-Cliboard is a powershell tool for acquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#.<\/p>\n

Invoke-Clipboard has two methods of being called; one for clipboard logging\/harvesting (Invoke-ClipboardLogger) and the other for establishing a Command and Control (C2C) channel over the clipboard (Invoke-ClipboardC2C and Invoke-ClipboardC2V).<\/p>\n

Tool: https:\/\/github.com\/inguardians\/Invoke-Clipboard\/<\/a><\/p>\n

Blog: https:\/\/www.inguardians.com\/2019\/02\/06\/all-your-copy-paste-are-belong-to-us\/<\/a><\/p>\n

Demo: https:\/\/register.gotowebinar.com\/recording\/6187222806355461894<\/a><\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

By Adam Crompton, Senior Security Consultant, InGuardians Invoke-Cliboard is a powershell tool for acquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#. Invoke-Clipboard has […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[69],"tags":[128,18,86,97,103,98,130,129],"_links":{"self":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606"}],"collection":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/comments?post=2606"}],"version-history":[{"count":1,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606\/revisions"}],"predecessor-version":[{"id":2607,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606\/revisions\/2607"}],"wp:attachment":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/media?parent=2606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/categories?post=2606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/tags?post=2606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}