Core Certified Exploits

Library of expert validated exploits for safe and effective pen tests

Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective.

Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.

The universe of vulnerabilities is huge and not all of them represent the same risk for the customers. Vulnerabilities do not all have the same level of criticality. Some may be easily exploitable by a low-level user, while others may not be exploitable at all. To increase the efficiency of the attacks and the quality of the exploits provided, the Core Impact team has developed selection criteria to prioritize its analysis and implementation. We determine which exploits warrant creation based on the following questions:

  • What are the most critical attacks from the attacker’s perspective?
  • What new vulnerabilities are more likely to be exploited in real attacks?
  • What exploits are the most valuable for Core Impact?

Once an exploit is approved, its priority order considers the following variables: 

  • Vulnerability Properties: CVE, disclosure date, access mechanism and privileges needed. 
  • Target Environment Setup: OS, application prevalence, version and special configurations needed. 
  • Value Provided to Core Impact: Customer request, usage in multiple attacks, allows the installation of an agent, etc. 
  • Technical Cost vs. Benefit: An analysis weighing the resources needed to build an exploit with the internal and external knowledge gained in its creation. 

Each one of these variables has a different weight and provides a ranking of the potential exploits to be developed. Following those criteria, the top of the list would contain, for example, a vulnerability on Windows (most popular OS) that can be exploited remotely, without authentication and that provides super user privileges. 

Correspondingly, a vulnerability on an application that is rarely installed, needs special configurations, and requires User Interaction, would be at the bottom.

Stay Informed of New Core Certified Exploits

Subscribe to receive regular email updates on new exploits available for Core Impact

Browse the Core Certified Exploit Library

We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications. 

Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.

Title Description Date Added CVE Link Exploit Platform Exploit Type Product Name
Linux Kernel DCCP_PKT_REQUEST Privilege Escalation Exploit This module exploits a double-free vulnerability in the Linux Kernel. The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to escalate privileges via an application that makes an IPV6_RECVPKTINFO setsockopt system call. CVE-2017-6074 Linux Exploits / Local Impact
Joomla com_fields SQL Injection Exploit This module exploits a SQL Injection vulnerability in Joomla which allows gathering of users and password hashes by parsing SQL output errors. CVE-2017-8917 Linux Exploits / SQL Injection / Known Vulnerabilities Impact
VMWare Aria Operations for Networks evictPublishedSupportBundles Remote OS Command Injection Exploit Unauthenticated OS Command Injection in evictPublishedSupportBundles function of ScriptUtils class of VMWare Aria Operations for Networks (aka vRealize Network Insight) CVE-2023-20887 Linux Exploits / OS Command Injection / Known Vulnerabilities Impact
CyberGhost CG6Service Service SetPeLauncherState Vulnerability Local Privilege Escalation Exploit The CG6Service Service in CyberGhost has the SetPeLauncherState method which allows a user to launch a debugger automatically for a determined process.

This can be abused by an attacker to gain SYSTEM privileges by attaching to a SYSTEM process. 		NOCVE-9999-85362 Windows Exploits / Local Impact
Hitachi Energy Abb CAP and PST 0-Day Remote Arbitrary File Overwrite This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side SCADA
Linux Looney Tunables GLIBC Local Privilege Escalation Exploit A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

 CVE-2023-4911 Linux Exploits / Local Impact
Apache Struts 2 File Upload Path Traversal Remote Code Execution Exploit An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.

 CVE-2023-50164 Linux Exploits / OS Command Injection / Known Vulnerabilities Impact
JBoss EJBInvokerServlet Java Deserialization Vulnerability Remote Code Execution Exploit JBoss Application Server is prone to a remote vulnerability due to deserialization of untrusted inputs, allowing attackers to instantiate arbitrary java objects leading to remote code execution.

This vulnerability affects the EJBInvokerServlet component of the server. 		NOCVE-9999-75005 Windows, Linux Exploits / Remote Code Execution Impact Professional
Novell ServiceDesk Remote Code Execution Exploit This module exploits a directory traversal vulnerability in Novell ServiceDesk. The specific flaw is located in the import functionality provided to a user. Authenticated users can upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL. CVE-2016-1593 Linux Exploits / Remote Impact Professional
Microsoft Windows Secondary Logon Vulnerability Exploit (MS16-032) This module exploits a vulnerability in "Windows Secondary Logon Service" when it fails to properly manage request handles in memory. CVE-2016-0099 Windows Exploits / Local Impact Professional
Client Side email templates processing improvements This update improves the processing of Client Side email templates. Exploits / Remote Impact
EVGA Precision X1 WinRing Local Privilege Escalation Exploit The driver in EVGA Precision X1 (aka WinRing0x64.sys) allows any user to read and write to arbitrary memory. CVE-2020-14979 Windows Exploits / Local Impact
Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Exploit An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. CVE-2020-1048 Windows Exploits / Local Impact
Digitus DN-16048 Camera Remote Configuration Disclosure Digitus DN-16048 Camera Remote Configuration Disclosure Exploits / Client Side IOT
SmartPTT Arbitrary File Upload SmartPTT Arbitrary File Upload Exploits / Remote SCADAPRO
Yawcam Directory Traversal Vulnerability This module exploits a directory traversal vulnerability in Yawcam Windows Exploits / Remote IOT
WiSCADA 2.0 0-Day Remote Arbitrary File Overwrite This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side SCADAPRO
Viper RGB Driver Kernel Buffer Overflow Local Privilege Escalation Exploit This module exploits a buffer overflow vulnerability in Viper RGB MsIo64.sys vulnerability allows unprivileged local users to execute code with SYSTEM privileges. CVE-2019-19452 Windows Exploits / Local Impact
SmartPTT_SCADA_RCE SmartPTT SCADA 1.1.0.0 suffers from remote code execution vulnerability.
It's located in ioServer in admin panel on 8101 port by default.
Attacker with administrator privileges can write malicious script on C# and execute it on the server.
Tested on SmartPTT SCADA 1.1.0.0 		Exploits / Remote Code Execution SCADAPRO
Citrix ADC and Gateway Directory Traversal Vulnerability Exploit Citrix Application Delivery Controller (ADC) and Citrix Gateway are prone to a directory traversal vulnerability that allows attackers to upload an XML file via newbm.pl and execute system commands. CVE-2019-19781 FreeBSD Exploits / Remote Impact
Seagate BlackArmor NAS sg2000-2000.1331 Unauthenticated Remote Code Execution Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote malicious users to execute arbitrary commands via shell metacharacters in the ip parameter to localJob.php. Exploits / Remote IOT
Microsoft Exchange MeetingPollHandler Deserialization Remote Code Execution Vulnerability Exploit Deserialization vulnerability in Microsoft Exchange MeetingPollProposeOptionsPayload.GetRequests() method. This method can be triggered with an HTTP request and with a specially crafted XML payload it can lead to OS command execution within the context of the w3wp.exe process which has SYSTEM level privileges.


 CVE-2021-28482 Windows Exploits / Remote Code Execution Impact
GeoVision GV-Recording Server Remote File Overwrite Vulnerability This module will receive HTTP requests from vulnerable clients and install agents on them. Exploits / Client Side SCADAPRO
SeowoninTech Seowon 130-SLC router Unauthenticated Command Execution Execute commands without authentication as admin user ,
To use it in all versions, we only enter the router ip and Port(if available) in the request.
The result of the request is visible on the browser page 		Exploits / Remote IOT
Windows Win32k Elevation Of Privilege Exploit (CVE-2019-0803) An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.



To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. 		CVE-2019-0803 Windows Exploits / Local Impact