Skip to content

Fix office_word_macro payload compatibility#21662

Open
d1mov wants to merge 1 commit into
rapid7:masterfrom
d1mov:patch-1
Open

Fix office_word_macro payload compatibility#21662
d1mov wants to merge 1 commit into
rapid7:masterfrom
d1mov:patch-1

Conversation

@d1mov

@d1mov d1mov commented Jul 8, 2026

Copy link
Copy Markdown

Fix office_word_macro Windows payload compatibility

Description

The exploit/multi/fileformat/office_word_macro module no longer exposed Windows payloads with newer Metasploit Framework versions.

The Windows target only defined:

'Platform' => 'win'

Without an explicit architecture declaration, the payload compatibility resolver filtered out Windows payloads such as Meterpreter payloads.

This change adds:

'Arch' => [ ARCH_X86, ARCH_X64 ]

to the Windows target definition.

Problem

Before this change:

msf> exploit(multi/fileformat/office_word_macro) > show payloads

Compatible Payloads
===================

generic/shell_reverse_tcp
generic/shell_bind_tcp
...

Attempting to use a Windows payload resulted in:

[-] Exploit failed: windows/meterpreter/reverse_tcp is not a compatible payload.

After adding the architecture information, Windows payloads are correctly available.

Verification

Tested with:

msfconsole
use exploit/multi/fileformat/office_word_macro
set TARGET 0
show payloads

Expected result:

Windows payloads are listed as compatible.

Tested payload selection:

set payload windows/meterpreter/reverse_tcp

Result:

The module successfully generates the Office document.

Testing

  • Tested locally with Metasploit Framework 6.4.142
  • Verified payload compatibility list before and after the change
  • Verified Windows payload selection after the patch
  • Office word macro document generated and successfully executed on windows target

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

2 participants