# strozfriedberg/Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

Repository: https://github.com/strozfriedberg/Windows-Exploit-Suggester
Canonical: https://ross.abutalabs.com/products/windows-exploit-suggester
Language: Python
License: GPL-3.0
License Family: copyleft
Archived: true
Last push: 2023-05-11T12:44:55+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 4439, "days_push": 1210, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4229, forks 1036 (observed 2026-08-28T04:08:39.414220+00:00)

## What it is
A Python CLI tool that compares a Windows host's patch level (from systeminfo output) against the Microsoft security bulletin database to detect missing patches. It flags bulletins with available public exploits or Metasploit modules to aid privilege escalation.

## Use cases
- find missing patches on a windows host from systeminfo output
- suggest local privilege escalation exploits for windows
- check if public exploits or metasploit modules exist for missing bulletins
- audit patch levels against the microsoft security bulletin database
- enumerate potential vulnerabilities during a penetration test

## When to choose
- you have systeminfo output from a Windows target and want a quick list of likely exploitable missing patches
- you need to identify privilege escalation opportunities during a pentest or CTF
- you want a lightweight offline Python tool with no agent on the target

## When to avoid
- you need accurate, low-false-positive vulnerability scanning - the tool assumes all vulns and only removes by hotfix data
- you need modern Windows 10/11 servicing-stack analysis rather than legacy MS bulletin data
- you want an actively developed tool - the Microsoft bulletin database it relies on is deprecated

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, vulnerability-scanning, cli
- domain: security, penetration-testing, windows
- platform: python, cli, windows
- tags: privilege-escalation, exploit-suggester, patch-management, metasploit, offensive-security, linux, macos

## Member repositories
- strozfriedberg/Windows-Exploit-Suggester (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:39.414220+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:22:21.215582+00:00, confidence not recorded.
  - readme: https://github.com/strozfriedberg/Windows-Exploit-Suggester (fetched 2026-08-28T04:08:39.414220+00:00, sha 6e99e117841e)
- Data as of 2026-08-30T08:39:29.467469+00:00.