ClipboardInject – Abusing the clipboard to inject code into remote processes

0
20

ClipboardInject – Abusing the clipboard to inject code into remote processes

Posted: 10/08/2022

SetClipboardData

CF_DIB

OpenClipboard

CloseClipboard

OpenClipboard

GetClipboardData

SetClipboardData

CF_DIB

OpenClipboard

EmptyClipboard

SetClipboardData

CloseClipboard

notepad.exe

CreateProcess

OpenClipboard(NULL)

GetClipboardData(CF_DIB)

CreateRemoteThread

OpenClipboard

GetClipboardData

CreateRemoteThread

GetClipboardData

CF_DIB

QueueUserAPC

OpenClipboard

0

ResumeThread

O…

Read More