⚠ DEMO 16 — Pastejacking | Authorized research only
PASTEJACKING
CLIPBOARD HIJACK · CTRL+V
User copies legitimate command from page. On paste, JavaScript intercepts and replaces
clipboard with malicious payload (e.g., curl | bash reverse shell).
[ COPY TEXT BELOW, THEN PASTE IN BOX ]
sudo apt update && sudo apt upgrade -y
Paste destination:
[*] Copy the command above, arm trap, then paste in textarea...
Defense: Paste into plain text editor first; verify commands; browsers limit programmatic clipboard write without gesture.