Clipboard

Get the Clipboard content (text)

The Clipboard command is designed to retrieve the content of the user's clipboard, specifically text data. This command can be valuable in scenarios where the operator is searching for credentials or any other information that could facilitate lateral movement within the network.

To use the Clipboard command, simply type Clipboard in the Amnesiac console and execute the command. The text content stored in the clipboard will be displayed on the screen, allowing the operator to inspect and collect potentially valuable information.

Additionally, the content retrieved from the clipboard is saved within the "C:\Users\Public\Documents\Amnesiac\Clipboard" folder for future reference and analysis.

Please note that the current session process needs to be a child process of the Explorer user process in order to be able to retrieve the user's clipboard content. Using the command from an NT Authority\System shell (for example) will not produce results, as that user has no content saved in the Clipboard.