GDSSecurity/Windows-Exploit-SuggesterArchived
Windows Exploit Suggester
Windows-Exploit-Suggester 是一个安全审计工具，旨在扫描 Windows 系统中的过时组件和缺失的安全补丁。它作为一个漏洞扫描器，将目标补丁级别与官方供应商安全公告进行比较，以识别安全漏洞。
该工具专注于漏洞利用映射，将识别出的缺失更新链接到已知的公共漏洞利用代码和可用的渗透测试模块。它通过将缺失的补丁与特定的漏洞标识符进行交叉引用，自动执行研究过程，以确定适用的攻击向量。
该系统包括远程补丁级别比较和启发式检测功能，以推断主机的状态。它通过同步机制保持准确性，该机制从供应商源下载并解析最新的安全数据，以更新其内部漏洞数据库。
Features
- Windows Vulnerability Assessments - Performs security audits specifically targeting Windows host configurations and missing security updates.
- Automated Exploit Collectors - Automatically maps missing software updates to available exploit code to streamline vulnerability discovery.
- Exploit Recommendations - Suggests specific publicly available exploits based on identified missing security patches.
- Patch Auditing Tools - Audits installed Windows fixes against official catalogs to identify security gaps.
- Missing Patch Detection - Identifies missing security updates on a target system using versioning and patch metadata.
- Vulnerability Matching - Compares detected system versions against known flaw databases to identify missing security updates.
- Vulnerability Scanners - Automated scanner that analyzes infrastructure to detect potential security flaws and missing patches.
- Exploit Mapping - Links identified security gaps to specific known exploits and Metasploit modules.
- Penetration Testing - Provides frameworks for conducting security assessments by linking missing updates to applicable exploits.
- Security Definition Synchronizations - Automatically downloads and merges external security bulletins and vulnerability metadata into local storage.
- Remote Patch Auditing - Analyzes the current state of a remote system to determine if specific security updates are absent.
- Security Auditing Tools - Identifies security flaws and outdated system components through automated auditing.
- Vulnerability Data Synchronization - Updates local security definitions from remote vendor vulnerability sources to maintain accuracy.
- Exploitation Tools - Tool for detecting missing patches and potential exploits.
- Penetration Testing Tools - Identifies potential missing patches for Windows systems.
- Privilege Escalation Tools - Tool for detecting missing security patches on Windows systems.
- Windows Security Utilities - Identifies missing patches and potential vulnerabilities on Windows systems.
