# Text Template Abuse for Code Execution

**URL:** <https://taggartinstitute.org/t/text-template-abuse-for-code-execution/817>\
**Category:** General\
**Tags:** windows, redteam, blueteam\
**Created:** [August 27, 2026, 12:54pm UTC](https://taggartinstitute.org/t/text-template-abuse-for-code-execution/817 "2026-08-27T12:54:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mttaggart](https://taggartinstitute.org/user_avatar/taggartinstitute.org/mttaggart/32/10_2.png) [@mttaggart](https://taggartinstitute.org/u/mttaggart)\
**Post date:** [August 27, 2026, 12:54pm UTC](https://taggartinstitute.org/t/text-template-abuse-for-code-execution/817/1 "2026-08-27T12:54:51Z")

</div>

This one was new to me!

> **[Text Template](https://ipurple.team/2026/08/24/text-template/)**
>
> Text template files can contain C# or Visual Basic code that could be compiled and executed at build time. Threat actors can create or modify .tt files to execute code in the context of a trusted p…