There's more...

From macros to CSV injection, when Microsoft Excel is used to open a CSV any cells starting with = will be interpreted by the software as a formula, since Excel provides the DDE protocol for interprocess communication, which we use to execute commands in the Excel window.

Get Metasploit Penetration Testing Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.