Core Certified Exploits | Core Labs | Core Security

Core Certified Exploits

Expert validated exploits for safe and effective pen tests

Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective. 

Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.

Stay Informed of New Core Certified Exploits

Subscribe to receive regular email updates on new exploits available for Core Impact

 

Browse the Core Certified Exploit Library

We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications. 

 

Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.

Title Description Date Added CVE Link Exploit Platform Exploit Type Product Name
Grafana 8.3.0 - Directory Traversal Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal,
allowing access to local files. The vulnerable URL path is: (grafana_host_url)/public/plugins//,
where is the plugin ID for any installed plugin. 		Exploits / Remote File Disclosure SCADAPRO
DBI Technologies Studio Controls for COM Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side SCADAPRO
Siemens SIMATIC S7-300 CPU Remote Denial of Service Specially crafted packets may also be sent to S7-300 CPU Port 80 (default), result in a denial-of-service. Denial of Service / Remote SCADA
Keysight Communications Fabric Denial of Service Remote Denial Keysight Communications Fabric Windows Denial of Service / Remote SCADA
JatonTec Config Download Vulnerability Exploit This module exploits a download the persistent settings file. FreeBSD Exploits / Remote SCADA
IMT Analytics AG FlowAnalyser FlowLab Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install RCE exploit on them. Exploits / Client Side SCADA
Raspberry Pi Default Credentials Exploit Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. CVE-2021-38759 Exploits / Remote Impact
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.

An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,

change, delete data or create new accounts with full user rights.

 CVE-2021-31956 Windows Exploits / Local Impact
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. CVE-2021-43798 Windows, Linux Exploits / Remote File Disclosure Impact
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. CVE-2021-44228 Windows, Linux Exploits / Remote Code Execution Impact
VMware vRealize Operations Manager Log4shell Remote Code Execution Vulnerability Exploit JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands. CVE-2021-44228 Linux Exploits / Remote Code Execution Impact
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges. CVE-2021-42321 Windows Exploits / Remote Code Execution Impact
Microsoft Windows Kernel ObpCreateSymbolicLinkName Denial of Service Exploit Update This module leverages on a race condition in the Windows kernel using symbolic links to crash the system.



This update adds the CVE number 		CVE-2021-41335 Windows Denial of Service / Local Impact
Wordpress <4.9.6 Arbitrary File Delete CVE-2018-12895 Wordpress Exploits / Remote SCADAPRO
PHPMyAdmin CVE-2018-12613 PHPMyAdmin Remote Code Execution Windows, Linux Exploits / Remote Code Execution SCADAPRO
Handysoft Co., Ltd Groupware HShell.dll Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. CVE-2021-26608 Exploits / Client Side SCADAPRO
GitLab 13.10.2 - Remote Code Execution CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Tested on GitLab CE 13.10.2 		Exploits / Remote Code Execution SCADAPRO
Soyal VisualProx Access Control Denial of Service Remote Denial Soyal VisualProx Access Control Windows Denial of Service / Remote SCADA
Eaton Visual Designer v7.1 software Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side SCADA
Eaton Lean Automation XP12inDemoProgram Directory Traversal and file disclosure Vulnerability This module exploits a directory traversal vulnerability in Eaton Automation XP12inDemoProgram Windows Exploits / Remote SCADA
SonicWall SMA 10.2.1.0-17sv Password Reset Vulnerability Exploit This module exploits a Overwrite the persistent database, resulting in password reset on reboot. CVE-2021-20034 FreeBSD Exploits / Remote IOT
Netis ADSL Router DL4322D Denial of Service Remote Netis ADSL Router allows remote attackers to cause a denial of service.The FTP service is vulnerable to a Denial of Service attack. Attackers simply need to log
into the router and send and valid FTP command with a character offset of 1461 as the command input 		Windows Denial of Service / Remote IOT
Coship Wireless Routers Unauthenticated Admin Password An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesnt have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router. CVE-2019-6441 Exploits / Remote IOT
Blue Iris Video Management Software ActiveX Control Remote Code Execution Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side IOT
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

 CVE-2021-22555 Linux Exploits / Local Impact