# Kernel Pack

**What is Kernel Pack?**

Kernel Pack is an advanced post-exploitation framework designed for Ring 0, kernel exploitation. It lets you configure, interact with, set up, and deploy your custom rootkits. It offers Red Teams and Penetration Testers a controlled way to interact with low-level threats that typically stay hidden from view.&#x20;

By simulating these types of attacks, you can:

* Learn and check how rootkits operate at the kernel level
* Test the defences of systems and detection mechanisms
* Improve your ability to recognise rootkit behaviour in real-world environments

The interface is intuitive and user-friendly, making learning by doing the most effective approach. By following this manual, you will learn the basics of Kernel Pack. Join our [Discord community](https://discord.com/invite/eXVAQag) to connect with the developers and other users along the way.

To master the advanced features of Kernel Pack, you'll need further learning and experience. We suggest setting up a lab environment to first explore the tool. This hands-on practice will help you fully utilise all the capabilities Kernel Pack offers.

{% embed url="<https://youtu.be/hhYqtUoUBw4?si=EWHwVuclw9EfaNhK>" %}

{% hint style="danger" %}
**Disclaimer:** Kernel Pack is a security testing software. It contains functionalities that could potentially damage or result in unexpected behaviour in some applications. Kernel Pack should only be used against non-production environments. Please read all documentation before using Kernel Pack,  and do NOT use Kernel Pack against any systems for which you are not authorised by the system owner.
{% endhint %}
