PDA

View Full Version : Ctrl+C or ^c (copy to clipboard) vulnerability and cure,


Billl Gates
05-13-2009, 01:40 PM
We do copy various data by Ctrl + C for pasting elsewhere. This copied data

is stored in clipboard and is accessible from the net by a combination of

Javascripts and ASP. http://img1.cyberwarez.info/images/smilies/biggrin.gif



Just try this:

1) Copy any text by Ctrl + C





2) Click the Link:
Code:

http://www.sourcecodesworld.com/special/clipboard.asp







3) You will see the text you copied was accessed by this web page.



Do not keep sensitive data (like passwords, credit card numbers, PIN etc.)

in the clipboard while surfing the web. It is extremely easy to extract

the text stored in the clipboard to steal your sensitive information.

Text From Your Clipboard - Source Code
The Clipboard hack is done by the following Source Code:

PHP Code:
<Script Language="JavaScript">
var content = clipboardData.getData("Text");
alert(content);
</Script>


Solution:

http://img411.imageshack.us/img411/3198/93858324.jpg

To avoid Clipboard Hack Problem, do the following:

1. Go to internet
options->security
2. Press custom level
3. In the security settings
, select disable under Allow paste operations via script.

Now the contents of your clipboard are safe. http://img1.cyberwarez.info/images/smilies/smile.gif

kasuncs
05-13-2009, 01:43 PM
Else use No Script Add-One for firefox...

BLACKLIST_MEMBER
05-13-2009, 01:53 PM
Else use No Script Add-One for firefox...
:yes: ;)
http://img.techpowerup.org/090513/Capture018.jpg

:D

Shameer
05-13-2009, 01:58 PM
oh mage ehema penne na ne e link ekata giyama :P

ChuttaFX
05-13-2009, 03:57 PM
after copy-n-pasting something like passwords, i always copy something else before submit the form where i pasted da pwrd. i didn't know whether it's possible to avoid it another way. thanx bill aiya. this'd make it easier 4me. :D