Provides an overview of new and enhanced features in Core Impact Pro R1 2015

1. THE EVER-EVOLVING WORLD
OF PENETRATION TESTING
Core Impact Pro® 2015 R1 Functional Release Overview

2. AGENDA
Introductions
What’s New in Core Impact Pro®
Penetration Testing Trends

3. “The bottom line is that we
always seek to make
penetration testing
as accessible and effective
as possible.” Raymond Suarez
Product Management
Alberto Soliño
Technical Program Management

4. • More and more organizations are carrying out
penetration testing
• But, the population of advanced ethical hackers
has not grown at quite the same rate
• More members of security and IT teams are being
asked to figure it out on the fly
• The C-Suite is now interested due to recent high-
profile attacks
PEN TESTING TRENDS

5. • Multi-Threat Surface
Investigation
• Commercial-Grade
Framework
• Custom Reports & Results
• Security Awareness &
Evidence
• Remediation Validation

6. WEB Test for OWASP Top 10 web application vulnerabilities
WI-FI Fake access point functionality for man-in-the-middle attacks
MOBILE Mobile device exploitation modules including Android Agent
ENDPOINT Test end-user awareness for phishing and social engineering
MULTI-VECTOR ATTACKS
NETWORK Pivot across networks using vulnerable systems

7. Pause-and-Resume for Network Wizards
GREATER FUNCTIONALITY +
USABILITY
1
2
3
4
Record login for Web Application Authentication
Kerberos Support
Flexible, Custom Reporting
5 Agent Persistency using WMI

8. ADDITIONAL ENHANCEMENTS
• Module Re-Launch: Re-launch with the original or
modified parameters
• Filter Executed Modules by Target: Visualize all of the
modules thrown against target
• Windows 10 Support: Detect, attack, and run under the
Microsoft Windows 10 OS
• BurpSuite Importer: Those using BurpSuite to crawl
web apps can import results into the WebApps Information
Gathering Wizard
• Rapid7 Nexpose Support: Access a Nexpose instance and
importing Nexpose “Network” results

9. SUPPORT: YOUR SUCCESS IS OUR
#1 PRIORITY
Annual subscription includes:
• Kick-off Consultation
• Core Impact Pro Jump-Start
• Technical Support 12x5 Standard
• Full Customer Service and Online Portal

10. Live Training Webinars (9AM & 3:00PM EST)
• Monday–Network Vector (60min)
• Tuesday –WiFi Vector (30min)
• Wednesday–Client-side Vector (60min)
• Thursday–Web Vector (60min)
Advanced Training Courses
• Core Impact Pro CICP (Certified Professional)
• Core Impact Pro CICAP (Certified Advanced Professional)
• 16 credits recognized by ISC2
TRAINING: YOUR SUCCESS IS OUR
#1 PRIORITY

11. ALBERTO SOLIÑO. @agsolino
@coresecurity I blog.coresecurity.com I www.coresecurity.com
THANK YOU!
RAY SUAREZ. @suarezraymond