bitsadmin/wesng
Wesng
该项目是一套用于 Windows 漏洞评估和补丁管理审计的专用工具。它作为一个漏洞扫描器和漏洞利用建议工具，通过分析已安装的更新来识别缺失的安全补丁及其对应的已知漏洞。
该系统的独特之处在于，它将缺失的更新与整合后的漏洞数据库进行匹配，从而推荐特定的公开漏洞利用程序。它通过将远程安全公告同步到本地数据库，并将识别出的漏洞与官方更新目录进行交叉引用，来处理补丁替代关系并消除误报，从而保持准确性。
该工具提供了安全表面分析功能，允许用户通过基于严重程度的过滤和安装日期细化来优先处理高风险漏洞。它还包含一个数据库客户端，用于从多个远程源收集和同步安全定义更新。
Features
- Windows Vulnerability Assessments - Performs security audits on Windows hosts to identify missing security updates and configuration gaps.
- Exploit Suggesters - Identifies potential vulnerabilities and suggests applicable exploits based on the target system configuration.
- Exploit Recommendations - Suggests specific publicly available exploits by mapping missing security patches against a vulnerability database.
- Security Definition Synchronizations - Downloads and merges external security bulletins and vulnerability metadata into a local database.
- Patch Auditing Tools - Provides utilities for auditing installed fixes against official catalogs to identify security gaps.
- Kernel Exploit Identification - Matches system versions and missing patches against vulnerability databases to find applicable exploits.
- Missing Patch Detection - Identifies missing security updates on target systems to uncover potential vulnerabilities.
- Patch Supersedence Filters - Filters out vulnerabilities that have been resolved by newer, cumulative security updates.
- Vulnerability Database Management - Synchronizes and maintains local copies of security metadata and bulletins from external sources.
- Update Catalog Querying - Queries official update catalogs to verify the status of missing security patches and eliminate false positives.
- Exploit Mapping - Connects missing patches to associated vulnerabilities based on severity, impact, and the availability of known exploits.
- Update Service Integrations - Interfaces with system update services and offline scan files to identify missing security patches.
- Vulnerability Result Refinements - Refines vulnerability findings using severity thresholds and installation dates to isolate high-risk gaps.
- Patch Accuracy Validation - Cross-references missing patches against official catalogs to remove false positives and verify installation requirements.
- Attack Surface Analysis - Analyzes the attack surface by filtering and prioritizing critical vulnerabilities on a target machine.
- Patch Exclusion Lists - Excludes specific update identifiers from results to remove false positives and refine identified gaps.
- Patch Date Filters - Filters vulnerability results based on the installation or release date of security patches.
- Security Data Consolidations - Aggregates vulnerability data and patch details from multiple remote sources into a unified local database.
- Security Vulnerability Trackers - Tracks the emergence of security flaws and updates vulnerability lists to maintain current analysis data.
- Vulnerability Data Synchronization - Updates local security definitions and exploit records from remote vulnerability sources.
- Security Patch False Positives - Removes known incorrect update results from the analysis to ensure only truly missing patches are reported.
- Vulnerability Severity Filtering - Filters vulnerability results using severity thresholds and installation dates to prioritize high-risk gaps.
- Exploit Development - Tool for identifying missing patches and potential exploits.
- Post Exploitation - Tool for identifying missing Windows patches.
- Privilege Escalation - Checks Windows systems for missing patches.
- Privilege Escalation Tools - Tool for suggesting Windows exploits based on system information.
