Alternatives for msdt, rft no click, and some possible improvements

[hastalamuerte]

Is it possible to use a ps1 file as a command , or txt will ps payload , raw ps payload . Or maybe read payload from dns records with netstat. https://github.com/rtfmkiesel/goldig (extra cool)

what if use not msdt , can Ms word spawn something that can execute pwsh ?
Here is a bit of em what have bypass and execute options
nandisec/mshta@909383b
https://lolbas-project.github.io/#

And I know that some rft formats is work on older versions plz add them too, no click version is nice too
https://github.com/chvancooten/follina.py
https://github.com/JMousqueton/PoC-CVE-2022-30190

@komomon thanks for your version , use of real file is a usefull