Skip to content

Instantly share code, notes, and snippets.

@khyberspache

khyberspache/clipboard_module.yml

Last active September 3, 2021 18:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save khyberspache/023701f1dec91264f49afa5838a18efb to your computer and use it in GitHub Desktop.
Save khyberspache/023701f1dec91264f49afa5838a18efb to your computer and use it in GitHub Desktop.
Download ZIP
Example PneumaEX module TTP
Raw
clipboard_module.yml
id: 2897b095-3356-456f-876c-3103f91352ab
metadata:
version: 1
authors:
- khyberspache
tags:
- thinktank
name: Capture clipboard using a module
description: |
Installs a user-land clipboard capture binary and collects the clipboard every 30 seconds for 10 minutes.
tactic: collection
technique:
id: T1115
name: Clipboard Data
platforms:
darwin:
keyword:
command: module.collect.captureClipboard
payload: "#{operator.payloads}/pneumaEX/collect/collect-darwin"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment