DDE Payloads
In October 2017 SensePost released an article which explained how it is possible arbitrary code to be executed from a Microsoft Word document and without using any macros or scripts. The technique that SensePost described was utilising a legitimate Microsoft office functionality which is called DDE…