【笔记】WES-NG学习笔记

发表于 更新于 阅读次数：

前言

Windows Exploit Suggester - Next Generation (WES-NG)
WES-NG is a tool based on the output of Windows’ systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, including their Windows Server counterparts, is supported.（Github）

下载项目

1
2
git clone https://github.com/bitsadmin/wesng.git
cd wesng

在受害者系统上执行信息收集命令

1
systeminfo > systeminfo.txt
  • 信息收集结束会在当前目录生成systeminfo.txt文件，拷贝回攻击者系统

在攻击者系统上分析信息收集结果

-o <file_name>.csv：输出结果为文件

1
python3 wes.py systeminfo.txt

完成