bitsadmin/wesng

Features

• Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates and configuration gaps.
• Exploit Suggesters - Identifies potential vulnerabilities and suggests applicable exploits based on the target system configuration.
• Exploit Recommendations - Suggests specific publicly available exploits by mapping missing security patches against a vulnerability database.
• Security Definition Synchronizations - Downloads and merges external security bulletins and vulnerability metadata into a local database.
• Patch Auditing Tools - Provides utilities for auditing installed fixes against official catalogs to identify security gaps.
• Kernel Exploit Identification - Matches system versions and missing patches against vulnerability databases to find applicable exploits.
• Missing Patch Detection - Identifies missing security updates on target systems to uncover potential vulnerabilities.
• Patch Supersedence Filters - Filters out vulnerabilities that have been resolved by newer, cumulative security updates.
• Vulnerability Database Management - Synchronizes and maintains local copies of security metadata and bulletins from external sources.
• Update Catalog Querying - Queries official update catalogs to verify the status of missing security patches and eliminate false positives.
• Exploit Mapping - Connects missing patches to associated vulnerabilities based on severity, impact, and the availability of known exploits.
• Update Service Integrations - Interfaces with system update services and offline scan files to identify missing security patches.
• Vulnerability Result Refinements - Refines vulnerability findings using severity thresholds and installation dates to isolate high-risk gaps.
• Patch Accuracy Validation - Cross-references missing patches against official catalogs to remove false positives and verify installation requirements.
• Attack Surface Analysis - Analyzes the attack surface by filtering and prioritizing critical vulnerabilities on a target machine.
• Patch Exclusion Lists - Excludes specific update identifiers from results to remove false positives and refine identified gaps.
• Patch Date Filters - Filters vulnerability results based on the installation or release date of security patches.
• Security Data Consolidations - Aggregates vulnerability data and patch details from multiple remote sources into a unified local database.
• Security Vulnerability Trackers - Tracks the emergence of security flaws and updates vulnerability lists to maintain current analysis data.
• Vulnerability Data Synchronization - Updates local security definitions and exploit records from remote vulnerability sources.
• Security Patch False Positives - Removes known incorrect update results from the analysis to ensure only truly missing patches are reported.
• Vulnerability Severity Filtering - Filters vulnerability results using severity thresholds and installation dates to prioritize high-risk gaps.
• Exploit Development - Tool for identifying missing patches and potential exploits.
• Privilege Escalation - Checks Windows systems for missing patches.
• Privilege Escalation Tools - Tool for suggesting Windows exploits based on system information.

Star history