Our latest technical articles

  • WinNotify: Building Kernel Read/Write from CR3-Based IOCTLs

    WinNotify: Building Kernel Read/Write from CR3-...

    In this post I’m going to document some notes from reversing the WinNotify signed driver and turning its IOCTL interface into a stable kernel read/write primitive. The driver has been...

    WinNotify: Building Kernel Read/Write from CR3-...

    In this post I’m going to document some notes from reversing the WinNotify signed driver and turning its IOCTL interface into a stable kernel read/write primitive. The driver has been...

  • Shadow SSDT Hijacking: Achieving Kernel Code Execution via Read-Write Primitives

    Shadow SSDT Hijacking: Achieving Kernel Code Ex...

    On this blog, I'll walk you through Shadow SSDT hijacking to achieve kernel code execution under VBS/HVCI/kCET-enabled environments in Windows 11 (latest build). We'll first cover the fundamentals of userland...

    Shadow SSDT Hijacking: Achieving Kernel Code Ex...

    On this blog, I'll walk you through Shadow SSDT hijacking to achieve kernel code execution under VBS/HVCI/kCET-enabled environments in Windows 11 (latest build). We'll first cover the fundamentals of userland...

  • BlueHammer Analysis (Defender LPE)

    BlueHammer Analysis (Defender LPE)

    Interested in Windows Kernel? Check out our Technical Training Courses --- The BlueHammer exploit for Windows Defender, recently disclosed by Nightmare Eclipse, probably won’t be added to Exploit Pack unless there is...

    BlueHammer Analysis (Defender LPE)

    Interested in Windows Kernel? Check out our Technical Training Courses --- The BlueHammer exploit for Windows Defender, recently disclosed by Nightmare Eclipse, probably won’t be added to Exploit Pack unless there is...

1 3

Windows Kernel Exploitation trainings, ready to download:

1 3

Who is behind Exploit Pack?

We are a specialized, research-driven cybersecurity company based in Maastricht, in the southern Netherlands, focused on offensive security research and advanced exploitation tooling.

Our work bridges low-level research and practical engineering, transforming the latest techniques from the lab into tools security professionals use to simulate real-world attacks and test systems under realistic conditions.

We build to push boundaries, dig deeper, and deliver measurable impact. That’s why professionals around the world rely on our offensive tools as part of their arsenal.

Frequently Asked Questions

Is there a trial version?

There’s no trial version of EP3.

We offer live demos so you can see how the platform works and evaluate its capabilities firsthand. If you’d like to schedule a demo, please visit our Contact page.

Full functionality is available only through licensed versions of the product, as certain components and advanced features are restricted to prevent misuse and piracy.

Licensing

Each EP3 Platform License includes one user seat, software updates, and technical support for one year. Additional seats can be added at any time.

I need a quote/invoice

Get in contact with us at support@exploitpack.com. Please include the company details and VAT number (if you're located in the EU).

Can I use the same license of EP3 on multiple computers/systems?

EP3 licenses are watermarked, assigned to a specific user and are not intended to be shared. Only one machine may use a license simultaneously. If you need to transfer a license to another system or make changes to your setup, please contact us.

For multiple users, additional seats are required.

Can I change the email linked to my EP3 license?

Licenses are assigned to a named user and associated email address. License transfers may be approved at Exploit Pack's discretion in cases such as employee departures and role changes.

What do I need before installing EP3?

Before installing our tool, ensure that you have the latest version of Java JDK installed and an internet connection.

For Windows: https://www.oracle.com/java/technologies/downloads/#jdk21-windows

For MacOS: https://www.oracle.com/java/technologies/downloads/#jdk21-mac

For Linux: https://docs.oracle.com/en/java/javase/21/install/installation-jdk-linux-platforms.html#GUID-4A6BD592-1840-4BB4-A758-4CD49E9EE88B

I need Technical support

Please get in touch with us at support@exploitpack.com, visit our contact page or our Discord Channel.

Is there documentation for the tool?

Yes, you will receive documentation upon purchase of an EP3 license.