Kernel

Kernel exploits aim to leverage Windows kernel vulnerabilities and typically result in high privileges, but requires advanced knowledge and carries a high risk of crashing the system.

1. System Info

> systeminfo

Host Name:                 CLIENTWK220
OS Name:                   Microsoft Windows 11 Pro
OS Version:                10.0.22621 N/A Build 22621
...

2. Hotfixes

3. Exploit

Vulnerabities on Windows OS systems can be found on the Security Update Guide, such as CVE-2023-29360, and their corresponding security updates can be shown on the Microsoft Update Catalog page.

WES-NG

Windows Exploit Suggester – Next Generation (WES-NG) is a post-exploitation tool that analyzes Windows system information to identify unpatched vulnerabilities and associated exploits. It supports all Windows OSs from XP through Windows 11, including server editions.

# Clone the repo
git clone https://github.com/bitsadmin/wesng --depth 1

# Update
wes.py --update

# systeminfo > systeminfo.txt on the target host
wes.py systeminfo.txt -e

This tool can generate a lot of false positives: make sure to check here how to eliminate them. The tool can also validate findings against Microsoft’s Update Catalog using the --muc-lookup option to reduce false positives, as the raw MSRC feed can be incomplete.