In order to identify exploits for applications that are installed on the system, we need to know what applications are installed:


Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" | select displayname 
# shows installed applications

Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" | select displayname,version
# shows installed applications and version information

Once you have a list of these applications, you can run searches for them based on this information. One of the best places to search is searchsploit, which comes with Kali:

searchsploit wordpress mail list
# searchs for exploits related to wordpress, mail and list

searchsploit wordpress mail list --exclude="(PoC)|/dos/"
searches for exploits related to wordpress, mail, list but excludes PoCs and dos style exploits