bitsadmin/wesng
Wesng
Ce projet est un ensemble d'utilitaires spécialisés pour l'évaluation des vulnérabilités Windows et l'audit de gestion des correctifs. Il fonctionne comme un scanner de vulnérabilités et un suggéreur d'exploits qui analyse les mises à jour installées pour identifier les correctifs de sécurité manquants et leurs vulnérabilités connues correspondantes.
Le système se distingue en faisant correspondre les mises à jour manquantes avec une base de données de vulnérabilités consolidée pour recommander des exploits publiquement disponibles spécifiques. Il maintient la précision en synchronisant les bulletins de sécurité distants dans une base de données locale et en recoupant les lacunes identifiées avec les catalogues de mises à jour officiels pour gérer la supersédence des correctifs et éliminer les faux positifs.
L'outil fournit des capacités pour l'analyse de la surface de sécurité, permettant aux utilisateurs de prioriser les lacunes à haut risque via un filtrage basé sur la sévérité et un affinement par date d'installation. Il inclut également un client de base de données pour la collecte et la synchronisation des mises à jour de définitions de sécurité provenant de multiples sources distantes.
Features
- Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates and configuration gaps.
- Exploit Suggesters - Identifies potential vulnerabilities and suggests applicable exploits based on the target system configuration.
- Exploit Recommendations - Suggests specific publicly available exploits by mapping missing security patches against a vulnerability database.
- Security Definition Synchronizations - Downloads and merges external security bulletins and vulnerability metadata into a local database.
- Patch Auditing Tools - Provides utilities for auditing installed fixes against official catalogs to identify security gaps.
- Kernel Exploit Identification - Matches system versions and missing patches against vulnerability databases to find applicable exploits.
- Missing Patch Detection - Identifies missing security updates on target systems to uncover potential vulnerabilities.
- Patch Supersedence Filters - Filters out vulnerabilities that have been resolved by newer, cumulative security updates.
- Vulnerability Database Management - Synchronizes and maintains local copies of security metadata and bulletins from external sources.
- Update Catalog Querying - Queries official update catalogs to verify the status of missing security patches and eliminate false positives.
- Exploit Mapping - Connects missing patches to associated vulnerabilities based on severity, impact, and the availability of known exploits.
- Update Service Integrations - Interfaces with system update services and offline scan files to identify missing security patches.
- Vulnerability Result Refinements - Refines vulnerability findings using severity thresholds and installation dates to isolate high-risk gaps.
- Patch Accuracy Validation - Cross-references missing patches against official catalogs to remove false positives and verify installation requirements.
- Attack Surface Analysis - Analyzes the attack surface by filtering and prioritizing critical vulnerabilities on a target machine.
- Patch Exclusion Lists - Excludes specific update identifiers from results to remove false positives and refine identified gaps.
- Patch Date Filters - Filters vulnerability results based on the installation or release date of security patches.
- Security Data Consolidations - Aggregates vulnerability data and patch details from multiple remote sources into a unified local database.
- Security Vulnerability Trackers - Tracks the emergence of security flaws and updates vulnerability lists to maintain current analysis data.
- Vulnerability Data Synchronization - Updates local security definitions and exploit records from remote vulnerability sources.
- Security Patch False Positives - Removes known incorrect update results from the analysis to ensure only truly missing patches are reported.
- Vulnerability Severity Filtering - Filters vulnerability results using severity thresholds and installation dates to prioritize high-risk gaps.
- Exploit Development - Tool for identifying missing patches and potential exploits.
- Post Exploitation - Tool for identifying missing Windows patches.
- Privilege Escalation - Checks Windows systems for missing patches.
- Privilege Escalation Tools - Tool for suggesting Windows exploits based on system information.
