Macro-Keystrokes

April 1, 2019 ยท View on GitHub

PoC of execution of commands on a Word macro, without the use of rundll32.exe and importation of kernel32 libraries such as CreateRemoteThread or CreateProcessA. This technique simply relies on sending keystrokes to the host.

https://www.secforce.com/blog/2019/04/death-by-keystrokes/