Core Impact

What is Core Impact?

Enhance the capabilities of the pen tester and maximize productivity.

Core Impact is an easy-to-use penetration testing tool with commercially developed and tested exploits that allow your security team to exploit security weaknesses, increase productivity, and improve efficiency.

Replicate attacks to find security flaws and test defenses

Core Impact gives you visibility into the effectiveness of your defenses and reveals where the most pressing risks lie in your environment. This allows you to assess your organization's ability to detect, prevent, and respond to multi-stage, real-world threats against your infrastructure, applications, and people.

Validate the effectiveness of the correction

Test systems exploited after a penetration test to verify that repair measures or compensation controls are effective and working.

People and Process Testing

Red and purple teams can assess their security posture using the same techniques employed by today's cybercriminals, replicating attacks that reveal how exploitable vulnerability chains make their way into your organization's critical systems and data.

Red and purple teamers can put their teams to the test by measuring their ability to identify attacks, monitor and validate their effectiveness of processes and procedures.

PEN TEST for every need

A tool for beginners and experts

Core Impact is designed for users of all levels. Beginners can update themselves with a user-friendly GUI and step-by-step descriptive wizards, allowing them to automatically collect the information they need. Advanced penetration testers can take advantage of the vast functionalities available. For example, since all modules, exploits, and tools are written in Python, users can modify them as they see fit.

Leveraging Phishing to Measure Security Awareness

Easily simulate a phishing campaign for your organization using Core Impact's dynamic phishing tools. After you create your campaign, any user who clicks on the link or enters sensitive information will be tracked for reporting and analysis.

But you can do more than just report who is susceptible to phishing. Impact's phishing functionality can also be used to collect credentials for other testing purposes.

Key features of Core Impact

Extensive Threat Library

Utilize a stable, up-to-date library of commercial-level exploits and real-world testing resources.

Pen Tester Teaming

Multiple security testers have the ability to interact in the same session, providing a common view of discovered and compromised network targets for optimal collaboration.

Multi-vector testing capabilities

Replicate attacks across network infrastructure, endpoints, web, and applications to reveal exploited vulnerabilities, allowing you to immediately remediate risks.

Automated cleaning

Enable programmable self-destruct capabilities for agents at different levels (product, workspace, module/RPT). This means that no agent is left behind after testing to drain resources or be used as a potential backdoor for attackers.

System Requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD/SSD: 50 GB of free space on main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit, and Microsoft Windows Vista 32-bit

Resolution: 1024×768