Audience
Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.
About Kernel Pack
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.
Other Popular Alternatives & Related Software
Control Pack
Control Pack is a commercial multi-agent command-and-control platform for user-mode red-team operations. It provides payload generation, configurable communications, persistent endpoint sessions, remote tasking, interactive terminals, file transfer, artifact collection and post-exploitation across Windows, Linux, macOS, JVM, .NET, scripting runtimes and browser sessions. Its agent portfolio includes native Windows agents and a cross-platform Rust agent with encrypted reverse SOCKS5 tunneling.
Learn more about Control Pack
KernelCare Enterprise
Global organizations trust TuxCare for live patching their critical Linux hosts and OT devices across their hybrid multi-cloud environments. No reboot is required to deploy and enable the TuxCare KernelCare Enterprise solutions to live patch Linux kernels and critical system libraries, including OpenSSL and Glibc. In contrast, all hosts and devices maintain the current production level uptime while receiving all security updates.
TuxCare automates the patching process and eliminates the need to wait weeks or months for reboot cycles to apply patches. TuxCare currently protects over 1 million workloads worldwide.
Tight integrations with popular patch management and vulnerability scanners, including Qualys, Crowdstrike, and Rapid7, enable TuxCare to fit seamlessly into existing infrastructure. The TuxCare secure patch server, ePortal, allows operations in gated and air-gapped environments.
Reduce risk by significantly reducing the mean time to patch vulnerabilities
Learn more about KernelCare Enterprise
syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer. Supports FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, and Windows. Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Once syzkaller detects a kernel crash in one of the VMs, it will automatically start the process of reproducing this crash. By default, it will use 4 VMs to reproduce the crash and then minimize the program that caused it. This may stop the fuzzing, since all of the VMs might be busy reproducing detected crashes. The process of reproducing one crash may take from a few minutes up to an hour depending on whether the crash is easily reproducible or non-reproducible at all.
Learn more about syzkaller
Zephyr
From simple embedded environmental sensors and LED wearables to sophisticated embedded controllers, smart watches, and IoT wireless applications. Implements configurable architecture-specific stack-overflow protection, kernel object and device driver permission tracking, and thread isolation with thread-level memory protection on x86, ARC, and ARM architectures, userspace, and memory domains. For platforms without MMU/MPU and memory constrained devices, supports combining application-specific code with a custom kernel to create a monolithic image that gets loaded and executed on a system’s hardware. Both the application code and kernel code execute in a single shared address space.
Learn more about Zephyr
Pricing
Starting Price:
€1,200/year
Pricing Details:
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Integrations
API:
Yes, Kernel Pack offers API access
No integrations listed.
Company Information
Exploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack
Videos and Screen Captures
Other Useful Business Software
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime
Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
Product Details
Platforms Supported
Windows
Mac
Linux
On-Premises
Training
Documentation
Live Online
Support
Online
Kernel Pack Frequently Asked Questions
Q: What kinds of users and organization types does Kernel Pack work with?
Kernel Pack works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Kernel Pack support in their product?
Kernel Pack supports these languages: English.
Q: What kind of support options does Kernel Pack offer?
Kernel Pack offers support via online.
Q: Does Kernel Pack have an API?
Yes, Kernel Pack has an API.
Q: What type of training does Kernel Pack provide?
Kernel Pack provides training in the form of documentation and live online.
Q: How much does Kernel Pack cost?
Pricing for Kernel Pack starts at €1,200/year.
