Kunai-Driverless

KO | EN

gitlite — search

#rag #sql #shell #html #cli #css #tensorflow #codex #android #swift

Kunai-Driverless

(★ 36)

Kunai Driverless is a Valorant External using a Driverless to Read/Write Memory

파일 탐색기

ZIP 다운로드

- - includes.h
- kunai-driverless.vcxproj
- kunai-driverless.vcxproj.filters
- kunai-driverless.vcxproj.user
- main.cxx
kunai.sln
README.md

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Kunai is **Valorant External** using a **1-Day Exploit** to **Read/Write Memory**. 
Driverless confirmed working on **Windows 10 and Windows 11**, including systems with **HVCI enabled**. 
You will need to **update** the **Valorant External** because it was updated a couple weeks ago.

# How does the driverless work?
Kunai uses a **BYOVD (Bring Your Own Vulnerable Driver)** technique temporarily for the **1-Day Exploit**. 
Our method is consided a **1-Day Exploit** because our **BYOVD** is used to exploit a **Patched Vulernablity** in windows. 
After exploiting the **Vulnerability** we map all **Physical Memory** and **Hide Our Process**.

<details>
 <summary>BYOVD</summary>

Our **Vulnernable Driver** is **EBIoDispatch** and it's compliant with **Vulnerable Driver Blocklist**. 
When we unload our **Vulnernable Driver** we change **MmUnloadedDrivers** Cache to be from a **Critical Process**. 
Disgusting our **Vulnernable Driver** to be loaded from a **Critical Process** works because of our **Process Hiding**. 
</details>

<details>
 <summary>1-Day Exploit</summary>

Our **1-Day** uses the **BYOVD** to set our **KThread::PreviousMode** to **Kernel Mode**, 
and use **NtOpenSection** to open a handle to **\\Device\\PhysicalMemory** to bypass the **SP1 (Windows Server 2003 Service Pack 1)** patch. 
The security patch **SP1** prevents **User Mode** processes from opening protected handles like **PhysicalMemory**. 
After obtaining a handle to **PhysicalMemory** we restore our **PreviousMode** and map all **Physical Memory** in our process.

</details>

<details>
 <summary>Process Hiding</summary>

Before loading the **BYOVD** we use **Token Impersonation** to elvate our process to **NT User Authority**, 
and we enable **DACL Protection** to prevent handles being opened to our process and restart the process.

Once we load the **BYOVD** and map all **Physical Memory** we unlink our **Handles** so they're not visible in **SystemInformation**, 
and unlink the **VAD Nodes** from the **Mapped Memory** so it's not visible. 
After we finish cleanup we set our process as a **Process-Protected Light (PPL) Anti-Malware** process. 
</details>
<img width="1939" height="590" alt="image" src="https://github.com/user-attachments/assets/d3d09934-7db8-4569-8a5e-14771b6740a3" />

# Valorant External
The **Valorant External** has **ESP and Aimbot** that was **tested in unrated**. 
The Features it has is Box(Corner/Full), Health Bars, Agent and Weapon Names and uses **Discord Overlay**. 
If you get a report **Valorant** will take a **GPU Screenshot** and Discord does not block that.

# Follow my Github and check out my other projects!

Kunai-Driverless

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Kunai-Driverless

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Download README