TIP: Solution for Hacking Through the Clipboard


You copy various data by using Ctrl+C or Ctrl+Insert for pasting elsewhere at a later time. This copied data is stored in the Clipboard and is accessible from the Net by a combination of JavaScripts and ASP. I want share this information because it potentially is very harmful. This information was gathered from the sourcrcodeworld forum.

Hacking Case

Just try this:

  1. Copy any text by pressing Ctrl+C.
  2. Click this link: http://www.sourcecodesworld.com/special/clipboard.asp.
  3. You will see the text you copied on the screen. It was accessed by this Web page.
  4. Do not keep sensitive data (like passwords, credit card
    numbers, PIN etc.) in the clipboard while surfing the web.
    It is extremely easy to extract the text stored in the
    clipboard to steal your sensitive information.

This works for both IE and Netscape.


To avoid the Clipboard hack problem, do the following:

  1. Go to Internet Options, Security.
  2. Press custom level.
  3. In the security settings, select disable under Allow paste operations via script.

Now, the contents of your clipboard are safe and you can continue to enjoy Web browsing.

Actual Script

The following few lines are the actual agent used to steal the Clipboard data from your machine:

<Script Language="JavaScript">
var content = clipboardData.getData("Text");

About the Author

Abdul shakoor Saqib

About Abdul Shakoor Saqib

Software Engineer

Mr. Abdul Shakoor Saqib has Master of Computer Science and has 3 years of application software development experience. He has specialized himself in developing software for process control system and integrated development environment. Currently he is working as Software Engineer & System Analyst at ISF, Islamabad, Pakistan.Core programming interest and experties are c,c++,vc++ development and MS Office Plugin and skills are MFC,ATL,COM programming. and enjoying to play with interface level with great hardware interaction programming.


  • Adding to Clipboard

    Posted by gaffy4u on 11/23/2007 01:20am

    We can use clipbrd.exe for seeing the clipboard contents. clipbrd.exe is available in Win 2000 and Win XP. Vista dont have this feature. Mohammed Gaffar Ahmed

  • Nope

    Posted by FoodBard on 01/23/2007 10:20pm

    Sorry, it ain't happening here. must be your PC only

  • IE problem only?

    Posted by Comintern on 08/04/2006 10:22pm

    I tried the link with the script on it several times, and could not get it to read my clipboard. Then, I scrolled down the page and saw the billboard saying "The best way to solve this problem is to use Firefox. Download Firefox from the link below:". Apparently this is only a security issue for IE users.

Leave a Comment
  • Your email address will not be published. All fields are required.

Top White Papers and Webcasts

  • Anthony Christie, the Chief Marketing Officer for Level Communications, is responsible for customer experience, worldwide marketing and product management. In this informative asset, he shares his insights into why a private network connection to cloud-bases applications is the right decision for your enterprise. Download now to find out more.

  • Moving from an on-premises environment to Office 365 does not remove the need to plan for disruptions or reduce the business risk requirements for protecting email services. If anything, some risks increase with a move to the cloud. Read how to ease the transition every business faces if considering or already migrating to cloud email. This white paper discusses: Setting expectations when migrating to Office 365 Understanding the implications of relying solely on Exchange Online security Necessary archiving …

Most Popular Programming Stories

More for Developers

RSS Feeds

Thanks for your registration, follow us on our social networks to keep up-to-date