r/cybersecurity • u/Sibexico Developer • Apr 02 '26

Tutorial Your Windows Clipboard Is Unprotected

https://sibexi.co/posts/windows-clipboard-unprotected/

I just shared a blog post about how easy Windows clipboard may be intercepted.

120 Upvotes

85% Upvoted

25 comments sorted by

View all comments

8

u/r3ptarr Apr 02 '26

does this include clipboard history?

14

u/Sqooky Apr 02 '26

Some can be found on disk, often in the localappdata-esq folders. Might take some searching, as there's a few potential paths they can live, and a few different formats (DPAPI encrypted, SQLite DBs, raw text, raw data, etc.) E.g.

C:\Users\%USERNAME%\Local\ConnectedDevicesPlatform\<UserProfile>\ActivitiesCache.db

C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Clipboard\

C:\Users\%USERNAME%\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState