Kernel Pack

Kernel Pack

Exploit Pack
+
+

Related Products

  • LM-Kit.NET
    29 Ratings
    Visit Website
  • iVerify
    1 Rating
    Visit Website
  • Astra Pentest
    296 Ratings
    Visit Website
  • Aikido Security
    364 Ratings
    Visit Website
  • Securden Endpoint Privilege Manager
    7 Ratings
    Visit Website
  • Onro
    20 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website
  • Detrack
    149 Ratings
    Visit Website
  • Securden Unified PAM
    89 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website

About

Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.

About

Lguest allows you to run multiple copies of the same 32-bit kernel, simply modprobe lg, then run Documentation/lguest/lguest to create a new guest. I suggest you try this yourself, lguest is incredibly easy to get up and running. It's also quite useful: I can test-boot kernels with it in less than a second, or about 10x faster than basic qemu, and 100x faster than a real boot. And as it uses a pty as console, you can do things like pipe it through grep. lguest is all one big kernel patch, including the launcher. It's in 2.6.23-git13 and above. Lguest aims to isolate the guest so it cannot reach outside to the host (except for virtual devices supplied by the host of course), even if the guest is malicious. However, a malicious guest kernel can currently pin host memory (up to the amount of memory allowed to the guest). Most images are set up to create a console virtual consoles (/dev/tty0 etc), but the lguest console is /dev/hvc0.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.

Audience

Developers and IT departments interested in a solution to run multiple copies of the same 32-bit kernel

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

€1,200/year
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Free Version Not Supported
Free Trial Not Supported

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Exploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack

Company Information

Lguest
Australia
lguest.ozlabs.org

Alternatives

Alternatives

Minoca OS

Minoca OS

Minoca
KVM

KVM

Red Hat
Control Pack

Control Pack

Exploit Pack VOF
syzkaller

syzkaller

Google

Categories

Categories

Hypervisors Supported

Integrations

No info available.

Integrations

No info available.
Claim Kernel Pack and update features and information
Claim Kernel Pack and update features and information
Claim Lguest and update features and information
Claim Lguest and update features and information