future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
https://vuls.io/
GNU General Public License v3.0
11.01k stars 1.16k forks source link

feat(scanner/windows): support Windows 11 24H2 #2051

Closed MaineK00n closed 1 month ago

MaineK00n commented 1 month ago

What did you implement:

add Windows 11 24H2

Type of change

How Has This Been Tested?

setup

:100644 100644 869ab61 0000000 M    windows/11/Vagrantfile

diff --git a/windows/11/Vagrantfile b/windows/11/Vagrantfile
index 869ab61..696f179 100644
--- a/windows/11/Vagrantfile
+++ b/windows/11/Vagrantfile
@@ -12,8 +12,8 @@ Vagrant.configure("2") do |config|

   # Every Vagrant development environment requires a box. You can search for
   # boxes at https://vagrantcloud.com/search.
-  config.vm.box = "gusztavvargadr/windows-11"
-  config.vm.box_version = "2302.0.2312"
+  config.vm.box = "gusztavvargadr/windows-11-24h2-enterprise"
+  config.vm.box_version = "2402.0.2409"

   # Disable automatic box update checking. If you disable this, then
   # boxes will only be checked for updates when the user runs

https://github.com/MaineK00n/vuls-targets/blob/b1f771a589a04edae6ee04d51f6889f3a4001419/windows/11/Vagrantfile

image

before

...
[Oct 18 15:24:52]  INFO [localhost] Validating config...
[Oct 18 15:24:52]  INFO [localhost] Detecting Server/Container OS... 
[Oct 18 15:24:52]  INFO [localhost] Detecting OS of servers... 
[Oct 18 15:24:54]  INFO [localhost] (1/1) Detected: vagrant: windows Windows 11 Version 23H2 for x64-based Systems
[Oct 18 15:24:54]  INFO [localhost] Detecting OS of containers... 
[Oct 18 15:24:54]  INFO [localhost] Checking Scan Modes... 
[Oct 18 15:24:54]  INFO [localhost] Detecting Platforms... 
[Oct 18 15:25:02]  INFO [localhost] (1/1) vagrant is running on other

Scan Summary
================
vagrant windowsWindows 11 Version 23H2 for x64-based Systems    6 installed, 0 updatable

To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

after

$ vuls scan
...
[Oct 18 15:21:23]  INFO [localhost] Validating config...
[Oct 18 15:21:23]  INFO [localhost] Detecting Server/Container OS... 
[Oct 18 15:21:23]  INFO [localhost] Detecting OS of servers... 
[Oct 18 15:21:31]  INFO [localhost] (1/1) Detected: vagrant: windows Windows 11 Version 24H2 for x64-based Systems
[Oct 18 15:21:31]  INFO [localhost] Detecting OS of containers... 
[Oct 18 15:21:31]  INFO [localhost] Checking Scan Modes... 
[Oct 18 15:21:31]  INFO [localhost] Detecting Platforms... 
[Oct 18 15:21:43]  INFO [localhost] (1/1) vagrant is running on other

Scan Summary
================
vagrant windowsWindows 11 Version 24H2 for x64-based Systems    5 installed, 0 updatable

To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ vuls report
...
[Oct 18 15:23:16]  INFO [localhost] vagrant: 70 CVEs are detected with gost
[Oct 18 15:23:16]  INFO [localhost] vagrant: 0 CVEs are detected with CPE
[Oct 18 15:23:16]  INFO [localhost] vagrant: 0 PoC are detected
[Oct 18 15:23:16]  INFO [localhost] vagrant: 0 exploits are detected
[Oct 18 15:23:16]  INFO [localhost] vagrant: Known Exploited Vulnerabilities are detected for 0 CVEs
[Oct 18 15:23:16]  INFO [localhost] vagrant: Cyber Threat Intelligences are detected for 0 CVEs
[Oct 18 15:23:16]  INFO [localhost] vagrant: total 70 CVEs detected
[Oct 18 15:23:16]  INFO [localhost] vagrant: 0 CVEs filtered by --confidence-over=80
vagrant (windowsWindows 11 Version 24H2 for x64-based Systems)
==============================================================
Total: 70 (Critical:0 High:39 Medium:31 Low:0 ?:0)
70/70 Fixed, 0 poc, 0 exploits, 0 kevs, uscert: 0, jpcert: 0 alerts
5 installed

+----------------+------+--------+-----+-----+-----------+---------+-----------+
|     CVE-ID     | CVSS | ATTACK | POC | KEV |   ALERT   |  FIXED  | PACKAGES  |
+----------------+------+--------+-----+-----+-----------+---------+-----------+
| CVE-2024-43517 |  8.8 |  AV:N  |     |     |           |   fixed | KB5044284 |
+----------------+------+--------+-----+-----+-----------+---------+-----------+
| CVE-2024-43518 |  8.8 |  AV:N  |     |     |           |   fixed | KB5044284 |
+----------------+------+--------+-----+-----+-----------+---------+-----------+
...

Checklist:

You don't have to satisfy all of the following.

Is this ready for review?: YES

Reference