AonCyberLabs / Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
GNU General Public License v3.0
3.94k stars 1.02k forks source link

Server 2016 is not supported #34

Open tbennett6421 opened 5 years ago

tbennett6421 commented 5 years ago

Command output

$ ./windows-exploit-suggester.py -d 2018-12-21-mssb.xls -i systeminfo.txt
[*] initiating winsploit version 3.3...
[*] database file detected as xls or xlsx based on extension
[*] attempting to read from the systeminfo input file
[+] systeminfo input file read successfully (ascii)
[-] unable to determine the windows versions from the input file specified. consider using --ostext option to force detection (example: --ostext 'windows 7 sp1 64-bit')

Input file

Host Name:                 DC1
OS Name:                   Microsoft Windows Server 2016 Datacenter
OS Version:                10.0.14393 N/A Build 14393
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Additional/Backup Domain Controller
OS Build Type:             Multiprocessor Free
Registered Owner:          Windows User
Registered Organization:   
Product ID:                00376-40000-00000-AA947
Original Install Date:     5/1/2018, 1:18:31 PM
System Boot Time:          12/20/2018, 4:00:31 PM
System Manufacturer:       VMware, Inc.
System Model:              VMware Virtual Platform
System Type:               x64-based PC
Processor(s):              1 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 45 Stepping 2 GenuineIntel ~3096 Mhz
BIOS Version:              Phoenix Technologies LTD 6.00, 4/5/2016
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume1
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-06:00) Central Time (US & Canada)
Total Physical Memory:     8,191 MB
Available Physical Memory: 6,643 MB
Virtual Memory: Max Size:  9,471 MB
Virtual Memory: Available: 8,001 MB
Virtual Memory: In Use:    1,470 MB
Page File Location(s):     C:\pagefile.sys
Domain:                    lab.local
Logon Server:              \\DC1
Hotfix(s):                 8 Hotfix(s) Installed.
                           [01]: KB3186568
                           [02]: KB3199986
                           [03]: KB4023834
                           [04]: KB4035631
                           [05]: KB4049065
                           [06]: KB4132216
                           [07]: KB4465659
                           [08]: KB4483229
Network Card(s):           1 NIC(s) Installed.
                           [01]: vmxnet3 Ethernet Adapter
                                 Connection Name: Ethernet
                                 DHCP Enabled:    No
                                 IP address(es)
                                 [01]: 10.0.0.10
Hyper-V Requirements:      A hypervisor has been detected. Features required for Hyper-V will not be displayed.
ryanvillarreal commented 5 years ago

Same issue.

CaledoniaProject commented 5 years ago

Have you tried to run again with --ostext=XXX ?

vincentcox commented 5 years ago

Same issue: image

CaledoniaProject commented 5 years ago

I believe the ostext must match one of the text in the bulletin:

screen 2019-02-20 at 18 49 46

n0rb4k commented 4 years ago

Windows Server 2016 doesn't work for me, I have tried all the variants of Windows Server 2016 as well as other older like Windows Server 2012 (which is working, indeed):

image

Thank you guys,

evets007 commented 4 years ago

I managed to get it work for me, add 2016 to the array in the getname(). Works without the --ostext flag

Line 959


  osnamearray=[["xp","XP"],
               ["2000","2000"],
               ["2003","2003"],
               ["vista","Vista"],
               ["2008","2008"],
               [" 7","7"],
               [" 8","8"],
               ["2012","2012"],
               ["2016","2016"],
               ["8.1","8.1"],
               [" 10","10"]]