Kernel Pack
byExploit PackClaimed
Windows kernel-agent C2 with 100+ exploit backends and runtime DOG chains
byExploit PackClaimed
Windows kernel-agent C2 with 100+ exploit backends and runtime DOG chains
Listed November 2026.
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges.
Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows.
Sign in with a free account to see the full list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Kernel Pack: features, pricing and alternatives.
Kernel Pack is a product by Exploit Pack in the Red-Team & Adversary Emulation category. It covers Red Team.
Kernel Pack is a commercial product. For pricing, visit https://www.exploitpack.com/products/kernel-pack or contact Exploit Pack.
Alternatives to Kernel Pack listed on CybersecTools:
Compare all Kernel Pack alternatives at https://cybersectools.com/alternatives/kernel-pack
Kernel Pack is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Exploit Pack for pricing and support terms.
Side by side: features, pricing model and the company behind each one.
Discontinued project for file-less persistence, attacks, and anti-forensic capabilities on Windows 7 32-bit systems.
Kali Linux is a specialized Linux distribution for cybersecurity professionals, focusing on penetration testing and security auditing.
KeeFarce extracts cleartext password database information from KeePass 2.x processes in memory using DLL injection and .NET runtime manipulation.
Autonomous AI offensive cyber platform for sovereign-grade threat neutralization.
A COM Command & Control framework that uses JScript to provide fileless remote access capabilities on Windows systems through a modular plugin architecture.
A cross-platform post-exploitation HTTP/2 Command & Control framework designed specifically for testing and exploiting containerized environments including Docker and Kubernetes.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,023 products.
Connect your AI
