# bitsadmin/wesng

Windows Exploit Suggester - Next Generation

Repository: https://github.com/bitsadmin/wesng
Canonical: https://ross.abutalabs.com/products/wesng
Language: Python
License: BSD-3-Clause
License Family: permissive
Topics: microsoft, windows, exploit, suggester, patches, updates
Last push: 2026-08-21T12:18:41+00:00

## Health v2 (maintenance only)
Score: 76/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 98, release rhythm 35, longevity 100
- inputs: {"age_days": 2741, "days_push": 12, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4923, forks 604 (observed 2026-08-28T04:09:02.489487+00:00)

## What it is
WES-NG is a Python command-line tool that parses Windows `systeminfo` output (or missing KB listings) and cross-references it against a regularly updated vulnerability database to identify missing patches and exploitable vulnerabilities. It supports every Windows OS from XP through Windows 11 and Server counterparts, and can suggest public exploits where available.

## Use cases
- find missing Windows patches from systeminfo output
- identify exploitable vulnerabilities on a Windows host
- check privilege escalation opportunities during pentests
- audit patch levels of remote Windows machines
- look up missing KBs against Microsoft Update Catalog

## When to choose
- auditing Windows hosts for missing security updates
- offensive security assessments needing local privilege escalation candidates
- offline analysis using only systeminfo output

## When to avoid
- non-Windows operating systems
- real-time continuous vulnerability management at enterprise scale
- Linux/macOS patch auditing

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, cli
- domain: security, windows, penetration-testing, developer-tools
- platform: windows, python, cli, cross-platform
- tags: windows-exploit-suggester, patch-management, systeminfo, privilege-escalation, msrc

## Member repositories
- bitsadmin/wesng (main) score 76

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:02.489487+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:18:00.681600+00:00, confidence not recorded.
  - readme: https://github.com/bitsadmin/wesng (fetched 2026-08-28T04:09:02.489487+00:00, sha fe398e110cd9)
  - registry_pypi: https://pypi.org/pypi/wesng/json (fetched 2026-08-29T08:59:47.486108+00:00, sha 1b5fd73780bf)
- Data as of 2026-08-30T08:39:29.467469+00:00.