Core Impact 7.5
Strengths: Serious vulnerability assessment and penetration testing tool
Weaknesses: Nothing that we found
Verdict: For the second year in a row, we give this tool our highest praise: approved for SC Labs
Core Impact is the ultimate tool for finding and exploiting possible holes in a network. Features include the ability to gather information about network assets, attack those assets and try to penetrate possible holes, gather local information through penetration, and finally attempt to use the information to gain access to resources.
This product has come a long way in ease of use since we first reviewed it a few years ago. The installation is basically still the same, guided by a short wizard that installs the product as well as WinPcap. Once installation is complete, the product can be easily updated with new exploits in just a few minutes and is ready to go.
The biggest change is in the user interface. Having been completely redesigned, it is much less crowded, more intuitive to use and advance features of the product can be setup a lot easier than before.
Core Impact provides some serious testing capabilities. Unlike many other products that just give long lists of possible vulnerabilities, it finds them and then tries to exploit them and gain access to resources. This allows you to prioritise real holes. Core also releases new exploits very frequently, so the product is always kept at the forefront of new and emerging threats and vulnerabilities.
The solution comes with a full user guide. This contains all product information from initial setup to using the tool and its features. We found this documentation to be well organised and easy to follow, with many screenshots and examples on how to get the most out of the product.
Customers who purchase Core Impact get product support, training, and exploit updates included with their licence. Support includes phone and email assistance as well as an online knowledge base and FAQ section.
At a price of £15,000, this product may seem like a big bite to take, but we have found it to be one of the most comprehensive tools we have used here at the lab. Core Impact provides a full picture of all possible holes in not only network assets, but also web applications and other remote exploits. We find this solution to be an excellent investment for almost any enterprise.