Kernel Pack

Kernel Pack

Exploit Pack
+
+

Related Products

  • LM-Kit.NET
    29 Ratings
    Visit Website
  • iVerify
    1 Rating
    Visit Website
  • Astra Pentest
    296 Ratings
    Visit Website
  • Aikido Security
    364 Ratings
    Visit Website
  • Securden Endpoint Privilege Manager
    7 Ratings
    Visit Website
  • Onro
    20 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website
  • Detrack
    149 Ratings
    Visit Website
  • Securden Unified PAM
    89 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website

About

Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.

About

Sprocket will work with your team to scope your assets and conduct initial reconnaissance. Ongoing change detection monitors and reveals shadow IT. After your first penetration test occurs, your assets are then continuously monitored and tested by expert penetration testers as new threats emerge and change occurs. Explore the routes attackers take exposing weaknesses across your security infrastructure. Work with penetration testers during your identification and remediation processes. Reveal the hackers' perspective of your organization's environment by the very same tools our experts use. Stay informed when your assets change or new threats are discovered. Remove the artificial time constraints on security tests. Attackers don't stop, and your assets and networks change throughout the year. Access unlimited retests, and on-demand attestation reports, remain compliant, and get holistic security reporting with actionable insights.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.

Audience

Companies wanting a platform to identify, verify, and simulate threats

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

€1,200/year
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Free Version Not Supported
Free Trial Not Supported

Pricing

Subscription-based. Reach out for details.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 4.6 / 5
design 5.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • - Continuous pen testing is the way to go and pretty much similar in price to point-in-time testing - High quality talent - on-demand testing is great when testing new controls and new security tools. - Portal to track testing / re-testing, findings and request manual testing. - Detailed attack narratives are great and don't see that provided with a lot of other providers.
  • Sprocket Security brings a high level of cybersecurity expertise to the table. Their detailed approach to penetration testing ensures no vulnerabilities are overlooked. They offer a comprehensive dashboard of any findings and steps for remediation.
  • The staff are friendly and knowledgeable; they conduct thorough penetration testing and post their findings to a modern, dynamic portal/dashboard. If a particular finding is difficult to remediate, they are willing to jump in and assist. The details of the findings are impressive with real proof that a system has been exploited. They conduct human-driven testing, instead of the common "pentest" which only lists known CVEs discovered by an automated scanner.
  • They are hands on and want to make sure your environment is secure. They are local to us as well and knowing that you can trust a company in town that will help you in an event is a good thing to have on hand.
  • - Easy - Support - Guidance on how to fix findings - Results - Reporting/Portal - Expertise - Functionality of the portal

Cons

  • No Single Sign-on integration yet to the portal Attack surface module could be further enhanced but they may not want to compete in that category.
  • Initial testing happens within a 90-day window. Would be nice to start seeing results of the test prior to completion.
  • It's not a direct reflection of Sprocket, but our third party MDR vendor seemed quite confused by the concept of "continuous" penetration testing.
  • The dashboard doesn't get populated for the first 90 days but there is a lot of testing to do so I completely understand!
  • - Many marketing emails - I'm already a customer - I really can' t think of anything else.

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Company Information

Exploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack

Company Information

Sprocket Security
Founded: 2018
United States
www.sprocketsecurity.com

Alternatives

Alternatives

CyBot

CyBot

Cronus Cyber Technologies
Minoca OS

Minoca OS

Minoca
Control Pack

Control Pack

Exploit Pack VOF
syzkaller

syzkaller

Google
ShadowKat

ShadowKat

3wSecurity

Categories

Categories

Integrations

Freshservice Not Supported
Jira Work Management Not Supported
MITRE ATT&CK Not Supported
Microsoft Teams Not Supported
ServiceNow Not Supported
Slack Not Supported

Integrations

Freshservice Supported
Jira Work Management Supported
MITRE ATT&CK Supported
Microsoft Teams Supported
ServiceNow Supported
Slack Supported
Claim Kernel Pack and update features and information
Claim Kernel Pack and update features and information
Claim Sprocket Security and update features and information
Claim Sprocket Security and update features and information