The next-generation offensive security suite for exploit development, command and control, and kernel operations.

The suite brings together three tools for offensive security operations, supported by AI-assisted operator capabilities. Exploit Pack handles exploit development and execution, Control Pack manages cross-platform command and control, and Kernel Pack extends operations into the Windows kernel. Each tool works independently or as part of a connected workflow, from vulnerability discovery and initial access to post-exploitation and low-level system control. One offensive security suite for every stage of the engagement.

Our latest technical write-ups

  • Exploit Pack at hack.lu 2026: Windows Kernel Exploitation on Windows 11

    Exploit Pack at hack.lu 2026: Windows Kernel Ex...

    On October 22, 2026, Exploit Pack Principal Developer Juan Sacco participated in hack.lu 2026 in Luxembourg, presenting research on modern Windows kernel exploitation and leading a hands-on workshop for security...

    Exploit Pack at hack.lu 2026: Windows Kernel Ex...

    On October 22, 2026, Exploit Pack Principal Developer Juan Sacco participated in hack.lu 2026 in Luxembourg, presenting research on modern Windows kernel exploitation and leading a hands-on workshop for security...

  • A novel Double Hijacking technique

    A novel Double Hijacking technique

    Introduction Double Hijacking combines a user-mode call redirect with a hijack of a kernel service table. The first hijack changes how an application reaches a native call. The second changes...

    A novel Double Hijacking technique

    Introduction Double Hijacking combines a user-mode call redirect with a hijack of a kernel service table. The first hijack changes how an application reaches a native call. The second changes...

  • CVE-2026-13043 Kernel Memory Access

    CVE-2026-13043 Kernel Memory Access

    Discovered by: Juan Sacco  Vendor: Panda Antivirus Security / WatchGuard  Component: Panda Kernel Memory Access Driver  Driver module: pskmad.sysCVE: 2026-13043 CVSS Score: 9.3Link: https://psirt.watchguard.com/CVE-2026-13043 CVE Summary A missing authentication vulnerability in...

    CVE-2026-13043 Kernel Memory Access

    Discovered by: Juan Sacco  Vendor: Panda Antivirus Security / WatchGuard  Component: Panda Kernel Memory Access Driver  Driver module: pskmad.sysCVE: 2026-13043 CVSS Score: 9.3Link: https://psirt.watchguard.com/CVE-2026-13043 CVE Summary A missing authentication vulnerability in...

  • Subverting the Windows Kernel: Juan Sacco's Research Presented at BruCON 2026

    Subverting the Windows Kernel: Juan Sacco's Res...

    At BruCON 2026, the principal developer of Exploit Pack, Juan Sacco, presented Subverting the Windows Kernel: When VBS, HVCI and kCET Are Enabled, a research talk exploring the limitations of modern Windows kernel...

    Subverting the Windows Kernel: Juan Sacco's Res...

    At BruCON 2026, the principal developer of Exploit Pack, Juan Sacco, presented Subverting the Windows Kernel: When VBS, HVCI and kCET Are Enabled, a research talk exploring the limitations of modern Windows kernel...

1 4

We are a small, specialized offensive security company based in the Netherlands. Our work focuses on exploit development, red teaming and advanced security research.

We build practical tools and training for security professionals to test systems and develop offensive capabilities.

Research drives what we build. By exploring new offensive techniques and digging into how systems and defenses work, we turn what we learn into practical capabilities.

Windows Kernel Exploitation training:

1 3

Frequently Asked Questions

Is there a trial version of our tools?

There’s no trial version of our tools.

We offer live demos so you can see how they work and evaluate their capabilities firsthand. If you’d like to schedule a demo, please visit our Contact page.

Full functionality is available only through licensed versions of the products, as certain components and advanced features are restricted to prevent misuse and piracy.

Licensing

Each license includes one user seat, software updates, and technical support for one year. Additional seats can be added at any time.

I need a quote/invoice

Contact us or email support@exploitpack.com. Please include the company details and VAT number (if you're located in the EU).

Can I use the same license on multiple computers/systems?

All our licenses are assigned to a user.

Only one machine may use a license at a time. If you need to transfer a license to another system or make changes to your setup, please get in touch with us. 

For multiple users, additional seats are required.

Can I change the email linked to my license?

Licenses are assigned to a named user and associated email address. License transfers may be approved at Exploit Pack's discretion in cases such as employee departures and role changes.

What do I need before installation?

Before installing our tools, ensure that you have the latest version of Java JDK installed and an internet connection.

For Windows: https://www.oracle.com/java/technologies/downloads/#jdk21-windows

For MacOS: https://www.oracle.com/java/technologies/downloads/#jdk21-mac

For Linux: https://docs.oracle.com/en/java/javase/21/install/installation-jdk-linux-platforms.html#GUID-4A6BD592-1840-4BB4-A758-4CD49E9EE88B

I need Technical support

Please get in touch with us at support@exploitpack.com, visit our contact page or our Discord Channel.

Is there documentation for the tools?

Yes, documentation is included with the purchase of a license. You'll also have access to our technical support team if you need any assistance or have questions.