PoCs Check

Guide
中文

Clipboard Write Test Guide

Summary Description

Clipboard Write is used to test Dapp silent clipboard writing. If the Dapp writes to the clipboard without a security alert from the wallet, there might be a clipboard hijacking vulnerability under certain circumstances, where the transfer address could be replaced with the attacker's address.

Vulnerability Identification

Click any area on the test page, and "You have been Hacked!!" will be written to the clipboard. Then, paste the data into the input box. If the pasted content becomes "You have been Hacked!!", the vulnerability is confirmed.

Solution

It is recommended to alert users about clipboard copy, paste, and read operations and to request user authorization before executing these actions.

Clicking anywhere on the page will write some text to the clipboard.