Security Testing for Network Servers and Workstations
Your organization´s servers and workstations make up the backbone of your IT infrastructure and house some of its most important information assets. Perimeter defenses offer these systems a level of protection, but no defensive application is 100% impervious to attack. It´s therefore critical to proactively test your organization´s ability to detect, prevent and respond to network threats.
By safely replicating real-world attacks against network systems, CORE IMPACT Pro enables you to determine …
- which systems are exposed if perimeter defenses
are compromised - what OS and services vulnerabilities pose real threats to
your network - how privileges can be escalated on compromised systems
- what information could be accessed, altered or stolen
- which systems are vulnerable to denial of service attacks
- how trust relationships could be used to propagate local attacks against other network systems
Practice Ongoing Security Assurance with Rapid Penetration Tests
Using CORE IMPACT Pro’s Rapid Penetration Test (RPT), you can regularly evaluate the security of network resources, without requiring advanced technical skills. The RPT incorporates industry-accepted best practices for security testing into six simple steps:
|
|
The RPT speeds security testing by automating the actions of an attacker and simultaneously launching multiple exploits against your network. This saves significant time versus manual testing, while providing a consistent, repeatable process for testing your evolving IT infrastructure.
Stay Ahead of the Latest Threats with Commercial-Grade Exploits
Quality exploits are critical to the success of any network security test. With CORE IMPACT Pro, you have full control over the most comprehensive, stable and up-to-date library of exploits available. Created in-house by a dedicated team of experts, they are guaranteed to be current, effective and safe for your network.
Core Security continually works to assess the current threat landscape and anticipate new threats. CORE IMPACT Pro customers therefore typically receive new exploits 8-10 times per month.
- See what makes our exploits “Commercial-Grade”
- Learn how CORE IMPACT Pro exploits work
- See a partial list of exploits in IMPACT Pro
Safely Demonstrate the Consequences of an Attack with IMPACT Pro Agents
CORE IMPACT Pro takes security testing to another level by not only identifying and proving the exploitability of vulnerabilities, but also demonstrating the consequences of a data breach. Once an IMPACT Pro exploit successfully compromises a system, the product’s Agent technology allows you to interact with the system as an attacker could – such as by browsing the file system, launching a command shell, or running local exploits to escalate user privileges. IMPACT Pro also allows you to pivot attacks from the newly compromised system to servers and workstations on the same network – replicating an attacker’s attempts to take advantage of trust relationships and gain access to increasingly sensitive information.
Assess Your Exposure to Large-Scale, Multi-Staged Threats
Cybercriminals are increasingly consolidating diverse attack methods to further extend their reach into compromised organizations. CORE IMPACT Pro is the only product to simulate multi-staged attacks by integrating network penetration testing with both end-user testing and web application testing. The product’s unified interface allows you to leverage systems compromised during end-user and web application tests as beachheads from which to launch local attacks on other network systems. You can also use information harvested from compromised employee databases to create and launch convincing spear phishing tests with IMPACT Pro’s end-user
testing capabilities.
