Audience
Professional penetration-testing teams, red teams, adversary-simulation teams, security consultancies, and authorized internal security teams requiring multi-platform command and control.
About Control Pack
Control Pack is a commercial multi-agent command-and-control platform for user-mode red-team operations. It provides payload generation, configurable communications, persistent endpoint sessions, remote tasking, interactive terminals, file transfer, artifact collection and post-exploitation across Windows, Linux, macOS, JVM, .NET, scripting runtimes and browser sessions. Its agent portfolio includes native Windows agents and a cross-platform Rust agent with encrypted reverse SOCKS5 tunneling.
Other Popular Alternatives & Related Software
Kernel Pack
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.
Learn more about Kernel Pack
SSHive
SSHive is a Mac app that brings SSH, SFTP, FTP/FTPS, RDP, VNC, Telnet and serial console sessions together in one window, designed as a MobaXterm alternative for macOS. Saved servers live in a sidebar with folders, favorites and recent connections. The SSH terminal has tabs, split panes, snippets and broadcast to several servers, with a CPU, RAM and uptime bar for Linux and macOS servers. An SFTP browser opens next to the terminal, alongside a dual-pane file manager with drag and drop, resumable uploads and a remote editor. It handles local, remote and SOCKS5 tunnels, jump hosts, and SSH agents such as 1Password, Strongbox, Secretive or Bitwarden. Windows Remote Desktop and VNC sessions open in tabs. Network tools, an OTP authenticator and an optional MCP server for AI assistants are built in. No account and no telemetry; passwords are encrypted with the macOS Keychain. Free on the Mac App Store with a one-time Pro purchase, and also available on iPhone and iPad.
Learn more about SSHive
AgentRidge
AgentRidge is desktop security-audit software for assessing e-commerce websites, customer portals and other web platforms within an authorized testing scope. Its AI agents explore defined pages, account roles, checkout flows, business rules, exposed services and data, coordinating security tools as part of an investigation. The software presents findings with evidence, reproduction steps, severity and business impact, and generates PDF reports for developers and security teams. Users can run independent assessments on macOS, Windows or Linux through the command-line edition; audit data and results are stored locally, while account, licensing and payment functions use online services. AgentRidge is intended for e-commerce operators, web-platform teams, agencies, developers, security engineers, penetration testers and red teams. Buyers may choose an annual software license for self-directed audits or a separately scoped, vendor-delivered audit and remediation service.
Learn more about AgentRidge
Invicti Web + API
Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.
Learn more about Invicti Web + API
Pricing
Starting Price:
€1,200/user/year
Pricing Details:
A single-user license costs €1,200 per year and covers one user on one machine. The license includes software updates and technical support for its one-year term and does not renew automatically.
Integrations
API:
Yes, Control Pack offers API access
No integrations listed.
Company Information
Exploit Pack VOF
Founded: 2008
Netherlands
www.exploitpack.com/products/control-pack
Videos and Screen Captures
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Windows
Mac
Linux
On-Premises
Training
Documentation
Live Online
Support
Online
Control Pack Frequently Asked Questions
Q: What kinds of users and organization types does Control Pack work with?
Control Pack works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Control Pack support in their product?
Control Pack supports these languages: English.
Q: What kind of support options does Control Pack offer?
Control Pack offers support via online.
Q: Does Control Pack have an API?
Yes, Control Pack has an API.
Q: What type of training does Control Pack provide?
Control Pack provides training in the form of documentation and live online.
Q: How much does Control Pack cost?
Pricing for Control Pack starts at €1,200/user/year.
