windows-exploit-suggester

wes systeminfo.txt --exploits-only --impact "elevation of privilege"

  • requires sudo apt install python-pip # python2 pip python2 -m pip install xlrd==1.2.0 # https://github.com/AonCyberLabs/Windows-Exploit-Suggester/issues/50

https://github.com/Riqky/Windows-Exploit-Suggester

  • needs a fix for io.StringIO
  • needs a try except IndexError
  • /opt/Windows-Exploit-Suggester/

python3 windows-exploit-suggester.py --update python3 windows-exploit-suggester.py -i /host/htb/granny/systeminfo.txt --database 2022-06-04-mssb.xls

python /opt/Windows-Exploit-Suggester/windows-exploit-suggester.py -i systeminfo.txt -d /opt/Windows-Exploit-Suggester/2022-06-04-mssb.xlsx

wes.py

  1. wes --update
  2. wes systeminfo.txt --impact 'Elevation of Privilege' -s critical
    1. wes systeminfo.txt --exploits-only

--- impacts • Impact: Denial of Service • Impact: Elevation of Privilege • Impact: Information Disclosure • Impact: Remote Code Execution • Impact: Security Feature Bypass • Impact: Spoofing

--- severities • Severity: Critical • Severity: Important