TIP: Solution for Hacking Through the Clipboard

Introduction

You copy various data by using Ctrl+C or Ctrl+Insert for pasting elsewhere at a later time. This copied data is stored in the Clipboard and is accessible from the Net by a combination of JavaScripts and ASP. I want share this information because it potentially is very harmful. This information was gathered from the sourcrcodeworld forum.

Hacking Case

Just try this:

  1. Copy any text by pressing Ctrl+C.
  2. Click this link: http://www.sourcecodesworld.com/special/clipboard.asp.
  3. You will see the text you copied on the screen. It was accessed by this Web page.
  4. Do not keep sensitive data (like passwords, credit card
    numbers, PIN etc.) in the clipboard while surfing the web.
    It is extremely easy to extract the text stored in the
    clipboard to steal your sensitive information.
    

This works for both IE and Netscape.

Solution

To avoid the Clipboard hack problem, do the following:

  1. Go to Internet Options, Security.
  2. Press custom level.
  3. In the security settings, select disable under Allow paste operations via script.

Now, the contents of your clipboard are safe and you can continue to enjoy Web browsing.

Actual Script

The following few lines are the actual agent used to steal the Clipboard data from your machine:

<Script Language="JavaScript">
var content = clipboardData.getData("Text");
alert(content);
</Script>


About the Author

Abdul shakoor Saqib

About Abdul Shakoor Saqib

Software Engineer

Mr. Abdul Shakoor Saqib has Master of Computer Science and has 3 years of application software development experience. He has specialized himself in developing software for process control system and integrated development environment. Currently he is working as Software Engineer & System Analyst at ISF, Islamabad, Pakistan.Core programming interest and experties are c,c++,vc++ development and MS Office Plugin and skills are MFC,ATL,COM programming. and enjoying to play with interface level with great hardware interaction programming.

Comments

  • Adding to Clipboard

    Posted by gaffy4u on 11/23/2007 01:20am

    We can use clipbrd.exe for seeing the clipboard contents. clipbrd.exe is available in Win 2000 and Win XP. Vista dont have this feature. Mohammed Gaffar Ahmed

    Reply
  • Nope

    Posted by FoodBard on 01/23/2007 10:20pm

    Sorry, it ain't happening here. must be your PC only

    Reply
  • IE problem only?

    Posted by Comintern on 08/04/2006 10:22pm

    I tried the link with the script on it several times, and could not get it to read my clipboard. Then, I scrolled down the page and saw the billboard saying "The best way to solve this problem is to use Firefox. Download Firefox from the link below:". Apparently this is only a security issue for IE users.

    Reply
Leave a Comment
  • Your email address will not be published. All fields are required.

Top White Papers and Webcasts

  • On-demand Event Event Date: September 10, 2014 Modern mobile applications connect systems-of-engagement (mobile apps) with systems-of-record (traditional IT) to deliver new and innovative business value. But the lifecycle for development of mobile apps is also new and different. Emerging trends in mobile development call for faster delivery of incremental features, coupled with feedback from the users of the app "in the wild." This loop of continuous delivery and continuous feedback is how the best mobile …

  • Agile methodologies give development and test teams the ability to build software at a faster rate than ever before. Combining DevOps with hybrid cloud architectures give teams not just the principles, but also the technology necessary to achieve their goals. By combining hybrid cloud and DevOps: IT departments maintain control, visibility, and security Dev/test teams remain agile and collaborative Organizational barriers are broken down Innovation and automation can thrive Download this white paper to …

Most Popular Programming Stories

More for Developers

Latest Developer Headlines

RSS Feeds