Core Certified Exploits

Expert validated exploits for safe and effective pen tests

Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective. 

Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.

Stay Informed of New Core Certified Exploits

Subscribe to receive regular email updates on new exploits available for Core Impact

 

Browse the Core Certified Exploit Library

We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications. 

 

Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.

Title Description Date Added CVE Link Exploit Platform Exploit Type Product Name
PolicyKit pkexec Elevation of Privilege Vulnerability Exploit A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. February 4, 2022 CVE-2021-4034 Linux Exploits / Local Impact
NTFS Set Short Name Checker This module allow to set a short name 8.3 of a file when you don't have write privileges to the directory where the file is located.The vulnerability exists due to NtfsSetShortNameInfo does not properly impose security restrictions in NTFS Set Short Name, which leads to security restrictions bypass and privilege escalation.

 January 28, 2022 CVE-2021-43240 Windows Exploits / Tools Impact
WebHMI_RCE The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal,
that may be automatically processed within the product's environment or lead to arbitrary code execution.
Tested on WebHMI 4.0.7475 		January 18, 2022 Exploits / Remote Code Execution SCADAPRO
Grafana 8.3.0 - Directory Traversal Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal,
allowing access to local files. The vulnerable URL path is: (grafana_host_url)/public/plugins//,
where is the plugin ID for any installed plugin. 		January 18, 2022 Exploits / Remote File Disclosure SCADAPRO
DBI Technologies Studio Controls for COM Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. January 18, 2022 Exploits / Client Side SCADAPRO
Siemens SIMATIC S7-300 CPU Remote Denial of Service Specially crafted packets may also be sent to S7-300 CPU Port 80 (default), result in a denial-of-service. January 17, 2022 Denial of Service / Remote SCADA
Keysight Communications Fabric Denial of Service Remote Denial Keysight Communications Fabric January 17, 2022 Windows Denial of Service / Remote SCADA
JatonTec Config Download Vulnerability Exploit This module exploits a download the persistent settings file. January 17, 2022 FreeBSD Exploits / Remote SCADA
IMT Analytics AG FlowAnalyser FlowLab Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install RCE exploit on them. January 17, 2022 Exploits / Client Side SCADA
Raspberry Pi Default Credentials Exploit Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. January 6, 2022 CVE-2021-38759 Exploits / Remote Impact
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.

An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,

change, delete data or create new accounts with full user rights.

 December 27, 2021 CVE-2021-31956 Windows Exploits / Local Impact
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. December 21, 2021 CVE-2021-43798 Windows, Linux Exploits / Remote File Disclosure Impact
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. December 13, 2021 CVE-2021-44228 Windows, Linux Exploits / Remote Code Execution Impact
VMware vRealize Operations Manager Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands. December 13, 2021 CVE-2021-44228 Linux Exploits / Remote Code Execution Impact
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges. December 10, 2021 CVE-2021-42321 Windows Exploits / Remote Code Execution Impact
Microsoft Windows Kernel ObpCreateSymbolicLinkName Denial of Service Exploit Update This module leverages on a race condition in the Windows kernel using symbolic links to crash the system.



This update adds the CVE number 		December 10, 2021 CVE-2021-41335 Windows Denial of Service / Local Impact
Wordpress <4.9.6 Arbitrary File Delete CVE-2018-12895 Wordpress December 9, 2021 Exploits / Remote SCADAPRO
PHPMyAdmin CVE-2018-12613 PHPMyAdmin Remote Code Execution December 9, 2021 Windows, Linux Exploits / Remote Code Execution SCADAPRO
Handysoft Co., Ltd Groupware HShell.dll Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. December 9, 2021 CVE-2021-26608 Exploits / Client Side SCADAPRO
GitLab 13.10.2 - Remote Code Execution CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Tested on GitLab CE 13.10.2 		December 9, 2021 Exploits / Remote Code Execution SCADAPRO
Soyal VisualProx Access Control Denial of Service Remote Denial Soyal VisualProx Access Control December 9, 2021 Windows Denial of Service / Remote SCADA
Eaton Visual Designer v7.1 software Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. December 9, 2021 Exploits / Client Side SCADA
Eaton Lean Automation XP12inDemoProgram Directory Traversal and file disclosure Vulnerability This module exploits a directory traversal vulnerability in Eaton Automation XP12inDemoProgram December 9, 2021 Windows Exploits / Remote SCADA
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

 December 1, 2021 CVE-2021-22555 Linux Exploits / Local Impact
Atlassian Confluence Webwork OGNL Injection Vulnerability Exploit An OGNL injection vulnerability in Confluence Server and Data Center allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. November 25, 2021 CVE-2021-26084 Linux, Windows Exploits / Remote Code Execution Impact