automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -18465,6 +18465,49 @@
     "needs_cleanup": false,
     "actions": []
   },
+  "auxiliary_fileformat/maldoc_in_pdf_polyglot": {
+    "name": "Maldoc in PDF Polyglot converter",
+    "fullname": "auxiliary/fileformat/maldoc_in_pdf_polyglot",
+    "aliases": [],
+    "rank": 300,
+    "disclosure_date": null,
+    "type": "auxiliary",
+    "author": [
+      "mekhalleh (RAMELLA Sebastien)"
+    ],
+    "description": "A malicious MHT file created can be opened in Microsoft Word even though it has magic numbers and file\n          structure of PDF.\n\n          If the file has configured macro, by opening it in Microsoft Word, VBS runs and performs malicious behaviors.\n\n          The attack does not bypass configured macro locks. And the malicious macros are also not executed when the\n          file is opened in PDF readers or similar software.",
+    "references": [
+      "URL-https://blogs.jpcert.or.jp/en/2023/08/maldocinpdf.html",
+      "URL-https://socradar.io/maldoc-in-pdf-a-novel-method-to-distribute-malicious-macros/",
+      "URL-https://www.nospamproxy.de/en/maldoc-in-pdf-danger-from-word-files-hidden-in-pdfs/",
+      "URL-https://github.com/exa-offsec/maldoc_in_pdf_polyglot/tree/main/demo"
+    ],
+    "platform": "Windows",
+    "arch": "",
+    "rport": null,
+    "autofilter_ports": [],
+    "autofilter_services": [],
+    "targets": null,
+    "mod_time": "2025-06-04 12:33:22 +0000",
+    "path": "/modules/auxiliary/fileformat/maldoc_in_pdf_polyglot.rb",
+    "is_install_path": true,
+    "ref_name": "fileformat/maldoc_in_pdf_polyglot",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [],
+      "SideEffects": [
+        "artifacts-on-disk"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": false,
+    "actions": []
+  },
   "auxiliary_fileformat/multidrop": {
     "name": "Windows SMB Multi Dropper",
     "fullname": "auxiliary/fileformat/multidrop",