> For the complete documentation index, see [llms.txt](https://ed4m4s.blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ed4m4s.blog/privilege-escalation/windows/kernel-exploits.md).

# Kernel Exploits

**SystemInfo**

```bash
# Enumerate Windows Version
systeminfo
```

#### What is it installed?

```bash
wmic qfe get Caption,Description,HotFixID,InstalledOn

# Specific to patches
wmic qfe get Caption,Description,HotFixID,InstalledOn | findstr /C:"KB3136041" /C:"KB4018483"
```

#### Windows Exploit Suggester

```bash
git clone https://github.com/AonCyberLabs/Windows-Exploit-Suggester.git
./windows-exploit-suggester.py --update
./windows-exploit-suggester.py --database 2019-10-15-mssb.xls --systeminfo systeminfo.txt
```

#### Sherlock

```bash
# Clone the repo with the following
git clone https://github.com/rasta-mouse/Sherlock.git

# On the command prompt run:
powershell -nop -ep bypass
Import-Module C:\path\to\Sherlock.ps1
Find-AllVulns
```