strozfriedberg/Windows-Exploit-SuggesterArchived
Windows Exploit Suggester
Windows-Exploit-Suggester is a security analysis tool designed to audit patch levels and identify vulnerabilities on Windows hosts. It functions as a vulnerability scanner and patch level auditor that compares installed system hotfixes against Microsoft security bulletins to detect missing updates.
The project maps these missing security updates to known public exploits and available Metasploit modules. It uses a vulnerability database interface to download and query external security bulletin data, linking specific unpatched vulnerabilities to viable exploit vectors.
The tool's capabilities cover vulnerability assessment and patch management through a patch-level comparison engine and target-state analysis. It maintains a local vulnerability database by synchronizing external data and parsing security bulletins into flat files for analysis.
Features
- Missing Patch Detection - Identifies missing security updates by comparing installed system hotfixes against a database of known updates.
- Exploit Mappers - Matches missing security updates to known public exploits and available Metasploit modules.
- Automated Security Patching - Audits whether a target host is up to date with the latest Microsoft security bulletins.
- Host Security Auditors - Evaluates the security posture of Windows hosts to detect outdated components and vulnerabilities.
- Vulnerability Scanners - Automatically analyzes system configurations to detect missing security patches and vulnerabilities.
- Target Service Analysis - Processes remote host system information to determine the current software patch version.
- Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates via hotfix comparison.
- Exploit Mapping - Links identified missing security updates to specific known public exploits and Metasploit modules.
- Windows Exploits - Searches for public exploit code and modules targeting specific unpatched Windows vulnerabilities.
- Penetration Workflows - Facilitates attack vector discovery by mapping missing updates to viable exploits and Metasploit modules.
- Vulnerability Database Management - Provides mechanisms for synchronizing and maintaining local copies of security metadata from external sources.
- Vulnerability Database APIs - Provides an interface to query external security bulletin data to determine target exploitability.
- Vulnerability Data Synchronization - Synchronizes local vulnerability definitions by downloading and parsing security bulletins from remote sources.
