Expert validated exploits for safe and effective pen tests
Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective.
Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.
Stay Informed of New Core Certified Exploits
Subscribe to receive regular email updates on new exploits available for Core Impact
Browse the Core Certified Exploit Library
We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications.
Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.
Title
Description
Date Added
CVE Link
Exploit Platform
Exploit Type
Product Name
Grafana 8.3.0 - Directory Traversal
Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: (grafana_host_url)/public/plugins//, where is the plugin ID for any installed plugin.
Exploits / Remote File Disclosure
SCADAPRO
DBI Technologies Studio Controls for COM Remote Code Execution Vulnerability
This module will receive HTTP requests from vulnerable clients and install agents on them.
Exploits / Client Side
SCADAPRO
Siemens SIMATIC S7-300 CPU Remote Denial of Service
Specially crafted packets may also be sent to S7-300 CPU Port 80 (default), result in a denial-of-service.
Denial of Service / Remote
SCADA
Keysight Communications Fabric Denial of Service
Remote Denial Keysight Communications Fabric
Windows
Denial of Service / Remote
SCADA
JatonTec Config Download Vulnerability Exploit
This module exploits a download the persistent settings file.
FreeBSD
Exploits / Remote
SCADA
IMT Analytics AG FlowAnalyser FlowLab Remote Code Execution Vulnerability
This module will receive HTTP requests from vulnerable clients and install RCE exploit on them.
Exploits / Client Side
SCADA
Raspberry Pi Default Credentials Exploit
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit
A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests.
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands.
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands.
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit
A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges.
CVE-2021-22205 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
Remote Netis ADSL Router allows remote attackers to cause a denial of service.The FTP service is vulnerable to a Denial of Service attack. Attackers simply need to log into the router and send and valid FTP command with a character offset of 1461 as the command input
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesnt have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.
Blue Iris Video Management Software ActiveX Control Remote Code Execution Vulnerability
This module will receive HTTP requests from vulnerable clients and install agents on them.
Exploits / Client Side
IOT
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.