Kernel PackExploit Pack
|
||||||
Related Products
|
||||||
About
As Comodo Advanced Endpoint Protection (AEP) protects your endpoints against malware, the AEP application itself routinely comes under attack by malicious applications trying to circumvent its protection. Fortunately, Comodo AEP includes robust self-protection countermeasures that prevent malicious applications from gaining control or circumventing Comodo AEP services. AEP does this by intercepting system calls that might present a threat to the applications such as Terminate Process or Create Remote Thread are obvious examples of calls that might pose a risk to AEP. Other less obvious but actually more dangerous call would be CreateFile as it can do a lot more than just create a file. Comodo AEP intercepts these calls and only allows them to proceed if they won’t harm the Comodo process. Comodo AEP also contains a kernel mode driver that it uses to prevent attempts to modify the system kernel directly.
|
About
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.
|
|||||
Platforms Supported
Windows
Supported
Mac
Supported
Linux
Not Supported
Cloud
Supported
On-Premises
Not Supported
iPhone
Supported
iPad
Supported
Android
Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Supported
Mac
Supported
Linux
Supported
Cloud
Not Supported
On-Premises
Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
IT security teams searching for an advanced endpoint protection solution
|
Audience
Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.
|
|||||
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Not Supported
24/7 Live Support
Not Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Supported
|
|||||
Screenshots and Videos |
Screenshots and Videos |
|||||
Pricing
No information available.
Free Version
Supported
Free Trial
Not Supported
|
Pricing
€1,200/year
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Free Version
Not Supported
Free Trial
Not Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Pros & Cons from Real UsersPros
Cons
|
||||||
Training
Documentation
Not Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Supported
|
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Supported
In Person
Not Supported
|
|||||
Company InformationComodo
Founded: 1998
United States
www.comodo.com
|
Company InformationExploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
|
|
||||||
Categories |
Categories |
|||||
Endpoint Protection Features
Activity Log
Supported
Antivirus
Supported
Application Security
Supported
Behavioral Analytics
Supported
Device Management
Not Supported
Encryption
Not Supported
Signature Matching
Not Supported
Web Threat Management
Not Supported
Whitelisting / Blacklisting
Supported
|
||||||
Integrations
CYREBRO
Supported
ClickSSL
Supported
HostBill
Supported
SSL2BUY
Supported
|
Integrations
CYREBRO
Not Supported
ClickSSL
Not Supported
HostBill
Not Supported
SSL2BUY
Not Supported
|
|||||
|
|
|