bitsadmin/wesng
Wesng
Este proyecto es un conjunto de utilidades especializadas para la evaluación de vulnerabilidades en Windows y la auditoría de gestión de parches. Funciona como un escáner de vulnerabilidades y sugeridor de exploits que analiza las actualizaciones instaladas para identificar parches de seguridad faltantes y sus vulnerabilidades conocidas correspondientes.
El sistema se distingue por comparar las actualizaciones faltantes con una base de datos de vulnerabilidades consolidada para recomendar exploits específicos disponibles públicamente. Mantiene la precisión sincronizando boletines de seguridad remotos en una base de datos local y realizando referencias cruzadas de las brechas identificadas contra catálogos de actualizaciones oficiales para manejar la superposición de parches y eliminar falsos positivos.
La herramienta proporciona capacidades para el análisis de la superficie de seguridad, permitiendo a los usuarios priorizar brechas de alto riesgo mediante filtrado basado en severidad y refinamiento por fecha de instalación. También incluye un cliente de base de datos para la recopilación y sincronización de actualizaciones de definiciones de seguridad desde múltiples fuentes remotas.
Features
- Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates and configuration gaps.
- Exploit Suggesters - Identifies potential vulnerabilities and suggests applicable exploits based on the target system configuration.
- Exploit Recommendations - Suggests specific publicly available exploits by mapping missing security patches against a vulnerability database.
- Security Definition Synchronizations - Downloads and merges external security bulletins and vulnerability metadata into a local database.
- Patch Auditing Tools - Provides utilities for auditing installed fixes against official catalogs to identify security gaps.
- Kernel Exploit Identification - Matches system versions and missing patches against vulnerability databases to find applicable exploits.
- Missing Patch Detection - Identifies missing security updates on target systems to uncover potential vulnerabilities.
- Patch Supersedence Filters - Filters out vulnerabilities that have been resolved by newer, cumulative security updates.
- Vulnerability Database Management - Synchronizes and maintains local copies of security metadata and bulletins from external sources.
- Update Catalog Querying - Queries official update catalogs to verify the status of missing security patches and eliminate false positives.
- Exploit Mapping - Connects missing patches to associated vulnerabilities based on severity, impact, and the availability of known exploits.
- Update Service Integrations - Interfaces with system update services and offline scan files to identify missing security patches.
- Vulnerability Result Refinements - Refines vulnerability findings using severity thresholds and installation dates to isolate high-risk gaps.
- Patch Accuracy Validation - Cross-references missing patches against official catalogs to remove false positives and verify installation requirements.
- Attack Surface Analysis - Analyzes the attack surface by filtering and prioritizing critical vulnerabilities on a target machine.
- Patch Exclusion Lists - Excludes specific update identifiers from results to remove false positives and refine identified gaps.
- Patch Date Filters - Filters vulnerability results based on the installation or release date of security patches.
- Security Data Consolidations - Aggregates vulnerability data and patch details from multiple remote sources into a unified local database.
- Security Vulnerability Trackers - Tracks the emergence of security flaws and updates vulnerability lists to maintain current analysis data.
- Vulnerability Data Synchronization - Updates local security definitions and exploit records from remote vulnerability sources.
- Security Patch False Positives - Removes known incorrect update results from the analysis to ensure only truly missing patches are reported.
- Vulnerability Severity Filtering - Filters vulnerability results using severity thresholds and installation dates to prioritize high-risk gaps.
- Exploit Development - Tool for identifying missing patches and potential exploits.
- Post Exploitation - Tool for identifying missing Windows patches.
- Privilege Escalation - Checks Windows systems for missing patches.
- Privilege Escalation Tools - Tool for suggesting Windows exploits based on system information.
