By Adam Crompton, Senior Security Consultant, InGuardians

Invoke-Cliboard is a powershell tool for acquiring clipboard data on Windows machines as well as creation of command and control through the clipboard. Invoke-Clipboard is written in PowerShell to use the user32.dll data link library (DLL) in order to import the appropriate clipboard functions using C#.

Invoke-Clipboard has two methods of being called; one for clipboard logging/harvesting (Invoke-ClipboardLogger) and the other for establishing a Command and Control (C2C) channel over the clipboard (Invoke-ClipboardC2C and Invoke-ClipboardC2V).

Tool: https://github.com/inguardians/Invoke-Clipboard/

Blog: https://www.inguardians.com/2019/02/06/all-your-copy-paste-are-belong-to-us/

Demo: https://register.gotowebinar.com/recording/6187222806355461894