Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/yanxintang/clipboard-online
clipboard-online is an application to share cilpboard text between Windows and iOS
Directly download
You can download latest release exe from here
From source code(only windows now)
Before you build, make sure you have installed golang. If not, maybe you need this
git clone git@github.com:YanxinTang/clipboard-online.git
cd clipboard-online
go get github.com/akavel/rsrc
./build.sh
.\build.ps1
release
directoryclipboard-online
on your windowsHTTP Shortcuts: https://meta.appinn.net/t/topic/20322
Tasker: https://github.com/YanxinTang/clipboard-online/issues/26
Thanks for the hard working by @xiozf, @Befod and someone else contributed for the Android approach!
clipboard-online.exe
will create two file which are config.json
and log.txt
in the execute path when first running
You can make customization by editing config.json
config.json
port
string
"8086"
logLevel
string
"warning"
"panic"
, "fatal"
, "error"
, "warning"
, "info"
, "debug"
, "trace"
authkey
string
''
authkeyExpiredTimeout
int64
30
tempDir
string
./temp
reserveHistory
Boolean
false
notify
object
copy
Bollean
false
paste
Boolean
false
The default http server will listen 8086
port and you can't chanage that since hardcoded.
X-API-Version
: indicates version of apiX-Client-Name
: indicates name of deviceX-Auth
: hashed authkey. Value from md5(config.authkey + timestamp/30)
Request
/
GET
Reponse
json
// 200 ok
{
"type": "text",
"data": "clipboard text on the server"
}
{
"type": "file",
"data": [
{
"name": "filename",
"content": "base64 string of file bytes"
}
...
]
}
Request
URL: /
Method: POST
Headers:
X-Content-Type
: indicates type of request body content
required
text
, file
, media
Body: json
For text:
{
"data": "text you want to set"
}
For file:
{
"data": [
{
"name": "filename",
"base64": "base64 string of file bytes"
}
]
}
Reponse
Reponse body is empty. If set successfully, status code will be 200
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.