Ross ROSS = Recommend OSS · open-source software intelligence for agents

strozfriedberg/Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. observed · 2026-08-28

github.com/strozfriedberg/Windows-Exploit-Suggester · Python · GPL-3.0 (copyleft) · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases archived

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4439
  • days_rel: n/a
  • days_push: 1210
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

4229 stars · 1036 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A Python CLI tool that compares a Windows host's patch level (from systeminfo output) against the Microsoft security bulletin database to detect missing patches. It flags bulletins with available public exploits or Metasploit modules to aid privilege escalation.

Use cases

  • find missing patches on a windows host from systeminfo output
  • suggest local privilege escalation exploits for windows
  • check if public exploits or metasploit modules exist for missing bulletins
  • audit patch levels against the microsoft security bulletin database
  • enumerate potential vulnerabilities during a penetration test

When to choose

  • you have systeminfo output from a Windows target and want a quick list of likely exploitable missing patches
  • you need to identify privilege escalation opportunities during a pentest or CTF
  • you want a lightweight offline Python tool with no agent on the target

When to avoid

  • you need accurate, low-false-positive vulnerability scanning - the tool assumes all vulns and only removes by hotfix data
  • you need modern Windows 10/11 servicing-stack analysis rather than legacy MS bulletin data
  • you want an actively developed tool - the Microsoft bulletin database it relies on is deprecated

Facets

cli-tool · maturity maintenance

security vulnerability-scanning cli security penetration-testing windows python cli windows privilege-escalation exploit-suggester patch-management metasploit offensive-security linux macos

1 source

Member repositories

RepositoryRoleHealth v2
strozfriedberg/Windows-Exploit-Suggestermain10

For agents

markdown · JSON · MCP: product_card(name="strozfriedberg/Windows-Exploit-Suggester")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem