Unpatched Vulnerabilities ¶

The following tools are specifically designed to detect unpatched Windows Vulnerabilities given Windows Build Version.

• wesng (4.2k ⭐, work locally from an output file 🙌)
• Watson (1.6k ⭐, 2020 🪦)
• Sherlock (1.9k ⭐, 2018 🪦)
• Windows-Exploit-Suggester (4.0k ⭐, 2017 🪦)

You can use wmic qfe or Get-HotFix | ft -AutoSize to list the last installed hotfixes.

Using wesng, you either systeminfo output or missingkbs.vbs?

PS> systeminfo > output.txt

Upload either output on your host and analyze it:

$ wes.py --update         # update local database
$ wes.py [...] output.txt # process the selected tool output