{"id":2606,"date":"2019-02-22T12:20:54","date_gmt":"2019-02-22T19:20:54","guid":{"rendered":"https:\/\/zed.inguardians.com\/?p=2606"},"modified":"2019-08-01T16:25:38","modified_gmt":"2019-08-01T23:25:38","slug":"invoke-clipboard","status":"publish","type":"post","link":"https:\/\/zed.inguardians.com\/tools\/invoke-clipboard\/","title":{"rendered":"Invoke-Clipboard"},"content":{"rendered":"<p>By Adam Crompton, Senior Security Consultant, InGuardians<\/p>\n<p>Invoke-Cliboard is a powershell tool for acquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#.<\/p>\n<p>Invoke-Clipboard has two methods of being called; one for clipboard logging\/harvesting (Invoke-ClipboardLogger) and the other for establishing a Command and Control (C2C) channel over the clipboard (Invoke-ClipboardC2C and Invoke-ClipboardC2V).<\/p>\n<p>Tool: <a href=\"https:\/\/github.com\/inguardians\/Invoke-Clipboard\/\">https:\/\/github.com\/inguardians\/Invoke-Clipboard\/<\/a><\/p>\n<p>Blog: <a href=\"https:\/\/www.inguardians.com\/2019\/02\/06\/all-your-copy-paste-are-belong-to-us\/\">https:\/\/www.inguardians.com\/2019\/02\/06\/all-your-copy-paste-are-belong-to-us\/<\/a><\/p>\n<p>Demo: <a href=\"https:\/\/register.gotowebinar.com\/recording\/6187222806355461894\">https:\/\/register.gotowebinar.com\/recording\/6187222806355461894<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Adam Crompton, Senior Security Consultant, InGuardians Invoke-Cliboard is a powershell tool for acquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#. Invoke-Clipboard has [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[69],"tags":[128,18,86,97,103,98,130,129],"_links":{"self":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606"}],"collection":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/comments?post=2606"}],"version-history":[{"count":1,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606\/revisions"}],"predecessor-version":[{"id":2607,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/posts\/2606\/revisions\/2607"}],"wp:attachment":[{"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/media?parent=2606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/categories?post=2606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zed.inguardians.com\/wp-json\/wp\/v2\/tags?post=2606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}