dxa4481/Pastejacking

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1437 stars · 100 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept demo of pastejacking: using JavaScript to override a user's clipboard contents when they copy text from a webpage, tricking them into pasting malicious commands into their terminal. It demonstrates clipboard hijacking attacks across Chrome, Firefox, Safari, and Internet Explorer.

Use cases

• demonstrate clipboard hijacking attacks
• test whether a browser is vulnerable to pastejacking
• educate users about copy-paste terminal attacks
• research clipboard override techniques via copy events
• show how hidden payloads can execute on paste
• raise awareness of phishing via innocent-looking commands

When to choose

• you need a working demo of pastejacking for security training or awareness
• you are researching browser clipboard API attack vectors
• you want to test terminal paste safety practices

When to avoid

• you need a production-ready security tool or mitigation library
• you want clipboard management utilities for legitimate apps
• you need a maintained, actively developed project

Facets

application · maturity maintenance

security browser-extension security web-development browser-extensions browser pastejacking clipboard-hijacking security-demo proof-of-concept social-engineering web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dxa4481/Pastejacking")