PowerShell, C-Sharp and DDE The Power Within

**Executive summary:** This blog post demonstrates how to combine a PowerShell exploit for MS16-032 (using embedded C# and DllImport calls) with Microsoft Excel DDE command execution to remotely load and run code and obtain a SYSTEM reverse shell; it provides code snippets, DDE formulas, and details on adding Winsock functions and STARTUPINFO handle redirection to spawn a socket-backed CMD process.