Audience
Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.
About Kernel Pack
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.
Other Popular Alternatives & Related Software
Minoca OS
Minoca OS is an open-source, general purpose operating system designed specifically for feature-rich embedded devices. It's got all the high-level functionality that you've come to expect from an operating system, but offers it in a fraction of the memory footprint. The driver API separates device drivers from the kernel, enabling driver binaries to remain compatible even when the kernel is updated. Driver separation allows for automatic loading and unloading of device drivers on demand. Hardware layer API allows for a single unified kernel, even on ARM. No need to maintain a separate kernel fork. A unified power management architecture allows for smarter power management decisions, leading to better device battery life. Fewer background tasks and wake-ups from idle means machines can reach deeper idle states and save even more power. Proprietary and non-GPL source licenses are available, keeping options open for your customers and end users.
Learn more
Control Pack
Control Pack is a commercial multi-agent command-and-control platform for user-mode red-team operations. It provides payload generation, configurable communications, persistent endpoint sessions, remote tasking, interactive terminals, file transfer, artifact collection and post-exploitation across Windows, Linux, macOS, JVM, .NET, scripting runtimes and browser sessions. Its agent portfolio includes native Windows agents and a cross-platform Rust agent with encrypted reverse SOCKS5 tunneling.
Learn more
Zephyr
From simple embedded environmental sensors and LED wearables to sophisticated embedded controllers, smart watches, and IoT wireless applications. Implements configurable architecture-specific stack-overflow protection, kernel object and device driver permission tracking, and thread isolation with thread-level memory protection on x86, ARC, and ARM architectures, userspace, and memory domains. For platforms without MMU/MPU and memory constrained devices, supports combining application-specific code with a custom kernel to create a monolithic image that gets loaded and executed on a system’s hardware. Both the application code and kernel code execute in a single shared address space.
Learn more
KernelCare Enterprise
Global organizations trust TuxCare for live patching their critical Linux hosts and OT devices across their hybrid multi-cloud environments. No reboot is required to deploy and enable the TuxCare KernelCare Enterprise solutions to live patch Linux kernels and critical system libraries, including OpenSSL and Glibc. In contrast, all hosts and devices maintain the current production level uptime while receiving all security updates.
TuxCare automates the patching process and eliminates the need to wait weeks or months for reboot cycles to apply patches. TuxCare currently protects over 1 million workloads worldwide.
Tight integrations with popular patch management and vulnerability scanners, including Qualys, Crowdstrike, and Rapid7, enable TuxCare to fit seamlessly into existing infrastructure. The TuxCare secure patch server, ePortal, allows operations in gated and air-gapped environments.
Reduce risk by significantly reducing the mean time to patch vulnerabilities
Learn more
Pricing
Starting Price:
€1,200/year
Pricing Details:
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Integrations
API:
Yes, Kernel Pack offers API access
No integrations listed.
Company Information
Exploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack
Videos and Screen Captures
Other Useful Business Software
Build Agents and Models on One Platform
Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Product Details
Platforms Supported
Windows
Mac
Linux
On-Premises
Training
Documentation
Live Online
Support
Online
