Believe It or Not! I can access your Personal Info.
Do you really think your personal info like Credit Card numbers, username, passwords etc. are safe.
If you do, then you are wrong.
Everyone uses CTRL + C to copy some data to paste it somewhere on the internet. Do you remember the last time you copied your Credit Card number to paste it on any form to buy a gift for your love ones and keep browsing the internet.
Do you really think No One cannot access that number?
Let’s try
Copy some text and click here. I am sure you will be shocked to see the results.
Ok, How This Hack Is Done?
It is true that anyone can use the script below to access the data in your clipboard using a combination of JavaScript, ASP, PHP or other programming languages. Your info can be stolen and stored on some different server without your knowledge.
This hack is done using the following code:
Javascript Code
<Script Language=”JavaScript”>
var content = clipboardData.getData(”Text”);
if (content!=null) {
document.write(”<center><font size=5 color=red>Text You Just Copied:</font> (see below)<br><br><span style=’background-color: #FFFF00′>”);
document.write(content);
document.write(”</span>”);}
else {document.write(’<center>No text found in clipboard. You are safe!</center>’);}
</Script>
Hopefully you haven’t copied a credit card number recently before surfing!
Don’t Worry! This is a simple example that I have used to give you a shock :-), however other programming languages can be used to store this info in a database.
How to Protect Yourself from this hack?
To protect your important info to be stolen follow the steps below:
1. Go to internet options -> Security
2. Press Custom Level
3. In the Security Settings, select Disable under Allow paste operations via script.
Now your info is safe. 
If you find this information useful please share it with the word. Use the Share This button below to add it to your shared bookmarks or Digg this to alert your friends.
Disclaimer:
The script used in this example only displays the clipboard content. No info is stored or sent anywhere.
If you enjoyed this post, please feel free to Share, Bookmark or E-Mail |
I am a Firefox User. It did not work.
It works only with IE and Netscape.
Its mentioned on the link you open. You can try with IE or Netscape.
Enjoy!
Hehe
I’m using Flock
“It works with IE and Netscape. Fire fox will not display any content. Try this in IE or Netscape.
Disclaimer:
The script used in this example only displays the clipboard content. No info is stored or sent anywhere.”
I’m SAFE!!
Glad I decided to look at your blog Mohit. Amazing all the little things you find in vulnerabilities from day to day. Great post.