bitsadmin/wesng
Wesng
This project is a set of specialized utilities for Windows vulnerability assessment and patch management auditing. It functions as a vulnerability scanner and exploit suggester that analyzes installed updates to identify missing security patches and their corresponding known vulnerabilities.
The system distinguishes itself by matching missing updates against a consolidated vulnerability database to recommend specific publicly available exploits. It maintains accuracy by synchronizing remote security bulletins into a local database and cross-referencing identified gaps against official update catalogs to handle patch supersedence and eliminate false positives.
The tool provides capabilities for security surface analysis, allowing users to prioritize high-risk gaps through severity-based filtering and installation date refinement. It also includes a database client for the collection and synchronization of security definition updates from multiple remote sources.
Features
- Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates and configuration gaps.
- Exploit Suggesters - Identifies potential vulnerabilities and suggests applicable exploits based on the target system configuration.
- Exploit Recommendations - Suggests specific publicly available exploits by mapping missing security patches against a vulnerability database.
- Security Definition Synchronizations - Downloads and merges external security bulletins and vulnerability metadata into a local database.
- Patch Auditing Tools - Provides utilities for auditing installed fixes against official catalogs to identify security gaps.
- Kernel Exploit Identification - Matches system versions and missing patches against vulnerability databases to find applicable exploits.
- Missing Patch Detection - Identifies missing security updates on target systems to uncover potential vulnerabilities.
- Patch Supersedence Filters - Filters out vulnerabilities that have been resolved by newer, cumulative security updates.
- Vulnerability Database Management - Synchronizes and maintains local copies of security metadata and bulletins from external sources.
- Update Catalog Querying - Queries official update catalogs to verify the status of missing security patches and eliminate false positives.
- Exploit Mapping - Connects missing patches to associated vulnerabilities based on severity, impact, and the availability of known exploits.
- Update Service Integrations - Interfaces with system update services and offline scan files to identify missing security patches.
- Vulnerability Result Refinements - Refines vulnerability findings using severity thresholds and installation dates to isolate high-risk gaps.
- Patch Accuracy Validation - Cross-references missing patches against official catalogs to remove false positives and verify installation requirements.
- Attack Surface Analysis - Analyzes the attack surface by filtering and prioritizing critical vulnerabilities on a target machine.
- Patch Exclusion Lists - Excludes specific update identifiers from results to remove false positives and refine identified gaps.
- Patch Date Filters - Filters vulnerability results based on the installation or release date of security patches.
- Security Data Consolidations - Aggregates vulnerability data and patch details from multiple remote sources into a unified local database.
- Security Vulnerability Trackers - Tracks the emergence of security flaws and updates vulnerability lists to maintain current analysis data.
- Vulnerability Data Synchronization - Updates local security definitions and exploit records from remote vulnerability sources.
- Security Patch False Positives - Removes known incorrect update results from the analysis to ensure only truly missing patches are reported.
- Vulnerability Severity Filtering - Filters vulnerability results using severity thresholds and installation dates to prioritize high-risk gaps.
- Exploit Development - Tool for identifying missing patches and potential exploits.
- Post Exploitation - Tool for identifying missing Windows patches.
- Privilege Escalation - Checks Windows systems for missing patches.
- Privilege Escalation Tools - Tool for suggesting Windows exploits based on system information.
