What SECRETS are in your Clipboard?

j-h.io/snyk || Snyk loves CTF challenges just like this for forensics and application security -- you can use Snyk to find vulnerabilities in your own projects FOR FREE ➡ j-h.io/snyk
00:00 - Clipboard Forensics
00:21 - The Setup
02:52 - Getting started
04:10 - Checking the data
05:15 - What next?
11:20 - Another way forward
13:07 - Viewing the DB
16:50 - Final Thoughts
🔥 KZbin ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

[@samuelbruce8837]

Don't know why I chuckled when John with all his automation and shortcuts typed out "yes" to the y/n prompt for sqlitebrowser install

[@Quephara]

Finding this channel is the last thing everyone does before deciding against smart homes

[@0_1_2]

Explain

[@humanperson2325]

@@0_1_2 security

[@lightwxrk]

basic quality of life improvements is nice, but I would never trust smart home locks on your doors, which I have seen people do.

[@UsernameXOXO]

​@@lightwxrk finding LPL is the last thing everyone does before deciding against locked doors, there's literally no difference; it takes skill to open either and a smashed window will always work better.

[@hannahsmith6095]

@@0_1_2 That already defeats the purpose if needs explaining. If you are in this channel you already know it.

[@AlucardNoir]

I haven't used windows in around 5 years now, but when I did I spent so much time in the AppData directory I had actually forgotten it's supposed to be a hidden folder.

[@itsawill9268]

Linux?

[@AlucardNoir]

@@itsawill9268 yeah. Thought about going Mac, but around that time it came out Apple had given Uighur data to the CCP.

[@teo2157]

@@itsawill9268 TempleOS

[@CattopyTheWeb]

Very cool CTF. I didn't know this was possible. Thanks John!

[@paulw3182]

The keyboard shortcuts trimming the data was great - excellent video!

[@767corp]

AppData that damn directory where all the game save files are hidden now days

[@aircraftmen_]

you unironically use youtube emojis??

[@bot-hk]

Amazing content quality, The video seemed way way more interactive since I last saw your video!! Kudossss!!!🎉

[@jmdefault]

I'm impressed, Microsoft is actually thorough for once. If you deativate the clipboard history the clipboard folder is completely gone and all the ClipboardPayload values in the database are NULL. I fully expected them to half-ass this again. The Payload values are still there however so an attacker could still find out where you copied data from.

[@userhandler0tten351]

Thanks for the constant motivation John!

[@cravenmoorehead5657]

I can’t keep up with these Hammond videos this dude Is fire

[@adyp487]

Awesome! Just awesome John! As always! 👏👏💜😎

[@ATLuh]

Thanks John! Always cool to see stuff from inversecos

[@CharlieG111]

Thanks John bro. I learnt so much from you. Wish one day we will meet 🎉

[@Bchicken2]

Ayyy great to see chompie be credited!! 11:40

[@matthewwallace5682]

Fantastic video. Thanks for sharing!

[@JSRJS]

great video John. Learn something everytime I watch one of your vids

[@victorsolhof3576]

“Running strings on these things” 😂 i love your videos!

[@Manavetri]

Brilliant as always !!!

[@local-admin]

1:43 Not parentheses but “%” or percent signs

[@andynn6691]

You can just paste the input into stdin of base64. No need to pipe it via echo. In bash you can also do

[@BGM99]

Average Man Page Enjoyer

[@vikingthedude]

How do you paste to stdin?

[@thomyhr]

This was really interesting. Thanks!

[@robertofolikwei23]

Thank you John.

[@andrecinelli]

Thanks for the video.

[@Gabbstah]

I've been looking for a video like this

[@anthgodz]

Love the vid❤

[@burpsploit741]

We need more forensics videos

[@johnathondupuis1301]

Awesome content in this video.

[@TAPCybersec]

Nice work! I came across a similar challenge not too long ago where the answer lied within the activities cache.

[@kal_dev]

😊😊thanks

[@Junk-Junky]

bro makes it look so easy

[@ellerionsnow3340]

Do you have any videos on SIFT?

[@shinrafahell]

Awesome 😎

[@mohammedissam3651]

Yeah this is really good topic

[@noi7160]

good video!

[@Pixailz]

Hey john great video as always, i have learn so many tips in bash thanks to you, now it's my turn :) In bash, you can specify the depth of dir that are display with this variable PROMPT_DIRTRIM like PROMPT_DIRTRIM=2 will trim your prompt from ~/Documents/dir1/dir2 to ~/.../dir1/dir2

[@bhagyalakshmi1053]

Going bad boys.

[@briansciretti-informatica6721]

Will we be able to try these challenges or the files aren't going to be released?

[@Dahlah.FightMe]

Nice :D

[@animalkillerable]

Nice

[@U20E0]

It’s interesting that even though MacOS keeps clipboard history ( only in RAM though, i think ), and provides an API to access it, no built-in software actually uses it.

[@ExCyberino]

Your VM is so fast, what hypervisor are you using on windows? I always experience so much lag even if a allocate almost all my host resources.

[@arjix8738]

Allocating all your host resources to a VM is bad.

[@ExCyberino]

@@arjix8738 sure

[@EricSchmeling]

Clippy is ‘cheesy’? How dare you sir?!?! 😂

[@Fidumo]

yeah, Clippy is Clippy, not Cheesy!

[@PancakeByte]

After the video, I realize that skills takes time. well it really is. its time to practice lol

[@DancePants2012b]

my Clipboard is in my Clipboard

[@im_typ0563]

Please do more challenges that you don’t do beforehand

[@bhagyalakshmi1053]

What is dpapi

[@monthoramemi1937]

❤❤

[@motbus3]

It seems Mr hammand has been playing some diablo 4

[@nordgaren2358]

Where do you see that?

[@9rye]

@@nordgaren2358 Most likely when he showcases his %APPDATA%/Local folder. 1:57

[@nordgaren2358]

@@9rye I don't see Battle.net or Diablo 4 in there, though.

[@tyrojames9937]

Que The Decrypting Tools.

[@saucymoon7134]

how do you get your hair to bounce like that. cute

[@Bafflementation]

Hmm, I'm pretty sure most SIFT VMs I've seen came with SQLite.

[@PeterAdiSaputro]

I don't find Clipboard folder on my Windows system

[@ciaobello1261]

❤❤💪💪

[@xxlarrytfvwxx9531]

I always run `type nul | clip` when I'm in public.

[@JamesTDG]

If someone did this to me, they'd regret looking at how many times I do Ctrl c, Ctrl v in my art...

[@geodebreaker]

1:41 do you mean percent symbols?

[@_JohnHammond]

Yes :)

[@stevelp]

@1:39, 2 percentage signs, not parentheses.

[@kipchickensout]

1:40 those aren't parentheses and you can just as well type that into the start menu :D

[@CharlieG111]

First comment for you ☝️

[@JohnPaulBuce]

seeing a popup that says "allow access to clipboard" scares me now

[@LocaLGh0sT]

Man, Windows is so flimsy.

[@bhagyalakshmi1053]

Main detecting persons also here other mind attack other mind to for controlling brain to attack print to work brain attack analysing for you brain to process cutting

[@tomr6955]

These are NOT parentheses: %

[@RunicSigils]

Considering everything I copy and paste are comments (especially if I'm leaving a long one I prefer to see it all written out before actually posting), links, and screenshots of things online, there would be nothing secret there.

[@bhagyalakshmi1053]

Saving work real get go language in get command for you object work headel application and tools, skills lod balance attending.

[@tilakmadichettitheappdeveloper]

Why ask "uncle Google" instead of chat gpt ?

[@officialchristophersmn]

SOON I WILL BE AN EXPECT IN ETHICAL HACKING

[@rob-890]

But not in spelling 😅

[@officialchristophersmn]

@@rob-890 I think you can be my good friend 😀

[@767corp]

@@rob-890 Let the kid dream !

[@CattopyTheWeb]

@@rob-890 lol 🤣

[@bhagyalakshmi1053]

Concurrent? What is rust,git comments skills tools elements server files lod comments balance attending hacking.

[@bhagyalakshmi1053]

Not andsting

[@RandomGeometryDashStuff]

05:47 you don't need to export PS1

[@MrBledi]

i hope this is patched already

[@xikes]

As a GUI user, watching someone navigating folders via command line and then alt-tab to some other normal GUI app just seems stupid. Unless you have a valid reason for not using a GUI, this is just pretentious and stupid. You are not appearing more smart or clever just by typing bunch of cd and ls.

[@MuigiTheModder]

Linux does not have ALT+TAB than windows does, and his type he can navigate folders terminal if he wants.

[@DamienWillis-pu9bm]

Dude he is just using Linux a very common way. You saying that you must do your way or the high way is clearly a sign that you hardly care about the community.

[@MangoMousse888]

Seems easier to just ring the NSA and ask if you could get some your unconstitutionally aquired data back if the form of your clipboard history, in this case. 😂😂😂

[@cougar-town]

the cloud_id means the clipboard data is being stored by some government that collects all the meta data is my assumption.

[@1stAshaMan]

Probably referring to OneDrive

[@impoppy9145]

Clipboard can be synced across devices in Windows. The option is called Clipboard Cloud Sync i think

[@bhagyalakshmi1053]

Assembly code file's get comment,biycod ujeing alrebm