I was wondering if anyone could point me to a link to download core impact. I checked the site, and I even used google. I saw another post from a while ago saying some user found a trial version of 3.2. I Have checked everywhere, I even tried P2P. I would greatly appreciate any help.
I just realized that asking for this program may cause come suspicion, as of its capabilities. I am honestly using it for a pen test on my home network, which runs my webserver, as well as my game servers. I also plan on opening an FTP server.
May 15th, 2004, 02:17 AM
It would seem all roads keep leading back to the main web site:
I saw a demo of it a while back and I was very happy to hear the price tag that goes along with it. At least I know the average skiddie won't be buying one. If memory serves it was $100,000 for a full version. For testing your *own* network they do have limited licenses that only allow you to scan a certain number of hosts. I believe the sales guy said it was about $3500 for 16 hosts.
May 15th, 2004, 06:11 AM
Does't Metasploit do about the same? , it open source (free) but i don't think there is a windows port. http://www.metasploit.com/
May 17th, 2004, 01:28 PM
Originally posted here by lessthanzero thanks for your comments Gump. any insight is always better than none - you highlighted some good points.
I've found a trial copy of 3.2. This should give me a decent example of how the product operates and performs even though I think CI is on version 3.3 now.
I know there is a demo version somewhere out there. I just can't seem to find it, thanks for your help, it is appreciated.
May 17th, 2004, 02:31 PM
Have you tried calling/emailing them asking for a demoversion?
Maybe it's just not available to the general public but can be made available to potential buyers.
May 17th, 2004, 03:48 PM
fwiw Core Impact has seriously dropped their prices. A couple of years ago I talked with them and they were in the $75k plus range. I talked to them again last month and they are down to $7k for full license plus a year of updates/maintenance.
I don't know about you, but if I was a company that paid 75k for a product two years ago that is now selling for a 10th of what it was I would be pissed.
Anyway, I don't think you can download a trial from them. I'm pretty sure you have to work with a sales person to get a trial.
For your home system you might want to look in to Metasploit instead, but you business network guys should check in to Core Impact they have some good stuff.
lumpyporridge there is a windows port for Metasploit. We have been checking it out here at work. There is a link from their downloads section to it. Metasploit can be roughly compared to Core Impact, but metasploit doesn't update with 0-days... actually I'm pretty sure they said they wouldn't be updating it with new exploits for quite some time. Core Impact has daily stuff most of the time, as does Immunity Canvas (but Immunity is a one man shop unlike Core).
May 17th, 2004, 09:57 PM
Metasploit is nothing like core Impact. Metasploit is a frame work for expolits, and it well worth having (DCOM on NT4 for example). Core Impact is a whole package (port scanning, service finger priniting, expoliting, and continued testing from an expolited machine), and tries to almost do all the security testing, but just clicking a mouse button. I have seen a demo of it and was not impressed in what I saw. All the things it did could be done by better tools (funny their port scanner worked in a very muck like nmap) as for the exploits most can found if you look hard enough.
May 18th, 2004, 02:58 PM
ya, i agreed with SittingDuck...... Metasploit allow u to do exploits for the system..... mostly u can add on exploits being explore and try to run the exploit like bufferoverflow to the target if they didnt do well in the patch management..........
well, i do have the FULL VERSION of the Core Impact.... that might cost u few thousand in the market....... erm......... anything nice and valuable stuff to exchange ??
May 18th, 2004, 05:41 PM
SittingDuck - even the folks at Metaspoilt say that their product is roughly equivilant to both Core Impact and Immunity Canvas. Roughly equivilant.
Angusy - poor form there mate. Attempting to trade a copyrighted/trademarked material on AO is a big no no.