VangR3

KO | EN

gitlite — search

#hacktoberfest #ai #golang #go #deep-learning #nodejs #macos #windows #awesome #cli #kubernetes #awesome-list #vue #pytorch

(★ 12)

an attempt with EPT

VangR3 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# VangR3 - Vanguard Bypass Tool

VangR3 is a lightweight anti-cheat bypass tool built on the MonkeyHypervisor infrastructure.

## 🏗️ Architecture

VangR3 leverages the existing MonkeyHypervisor infrastructure:

- **EPT-based Hooking**: Uses Extended Page Tables to hook functions without code modification
- **LBR Evasion**: Avoids Last Branch Record detection by using hypervisor-level hooks
- **Stealth Operation**: Operates entirely in hypervisor context, invisible to kernel-level detection
- **MouseClass Targeting**: Specifically targets MouseClassServiceCallback for input simulation

## 📁 Project Structure

```
VangR3/
├── VangR3_Architecture.md          # Detailed architecture documentation
├── VangR3.sln                      # Visual Studio solution
├── VangR3Driver/                   # Kernel driver component
│   ├── VangR3Driver.vcxproj
│   ├── DriverEntry.cpp             # Driver entry point and lifecycle
│   ├── MouseClassHook.cpp          # MouseClass hooking implementation
│   ├── VangR3Vmcall.cpp           # VMCALL interface extensions
│   └── VangR3Driver.h             # Driver headers
├── VangR3Client/                   # Usermode client application
│   ├── VangR3Client.vcxproj
│   ├── main.cpp                    # Main application and utilities
│   ├── VangR3Interface.cpp         # Driver communication interface
│   ├── GameDetection.cpp           # Game process detection
│   ├── AutoAim.cpp                 # Auto-aim functionality
│   └── VangR3Client.h             # Client headers
├── VangR3Core/                     # Shared components
│   └── VangR3Shared.h             # Common definitions and structures
└── README.md                       # This file
```

## 🔧 Prerequisites

### Development Environment
- Visual Studio 2022 with C++ workload
- Windows Driver Kit (WDK) 10.0.26100.0 or later
- Windows 10/11 x64 with VT-x support enabled

### Runtime Requirements
- Intel CPU with VT-x and EPT support
- VT-x enabled in BIOS/UEFI
- MonkeyHypervisor loaded and running
- Administrator privileges
- Test signing enabled (for development)

## 🚀 Building

1. **Clone the repository** (if not already done):
   ```bash
   git clone <repository-url>
   cd MonkeyHypervisor/VangR3
   ```

2. **Open the solution**:
   ```bash
   VangR3.sln
   ```

3. **Build the solution**:
   - Set configuration to `Release` and platform to `x64`
   - Build → Build Solution (Ctrl+Shift+B)

4. **Output files**:
   - `VangR3Driver/x64/Release/VangR3Driver.sys` - Kernel driver
   - `VangR3Client/x64/Release/VangR3Client.exe` - Client application

## 📋 Installation & Usage

### 1. Prerequisites Setup

Ensure MonkeyHypervisor is properly installed and running:
```bash
# Load the base hypervisor first
sc create MonkeyHypervisor binPath= "C:\path\to\HyperV-Intel.sys" type= kernel
sc start MonkeyHypervisor
```

### 2. Load VangR3 Driver

```bash
# Load VangR3 driver
sc create VangR3Driver binPath= "C:\path\to\VangR3Driver.sys" type= kernel
sc start VangR3Driver
```

### 3. Run VangR3 Client

```bash
# Run as Administrator
VangR3Client.exe
```

### 4. Basic Usage

1. **Start the client** - The application will automatically detect when Valorant is running
2. **Check status** - Use the `status` command to verify all components are working
3. **Install hook** - Hook will be automatically installed when the target process is detected
4. **Start auto-aim** - Use the `start` command to enable auto-aim functionality
5. **Monitor** - The client will display real-time status and input simulation

## 🎮 Supported Games

Currently designed for:
- **Valorant** (VALORANT-Win64-Shipping.exe)

The architecture can be extended to support other games by:
1. Modifying the target process name
2. Implementing game-specific memory reading
3. Adapting the auto-aim algorithms

## 🔍 Technical Details

### EPT Hooking Process

1. **MouseClass Discovery**: Dynamically locate MouseClassServiceCallback in classpnp.sys
2. **Page Splitting**: Convert 2MB pages to 4KB pages for fine-grained control
3. **EPT Modification**: Set execute-only permissions to trigger EPT violations
4. **Input Simulation**: Inject mouse input data through the hooked callback

### LBR Evasion

- **No Code Modification**: EPT hooks don't modify the original function code
- **Hypervisor Context**: All hook handling occurs in VMX root mode
- **MSR Preservation**: Never modifies IA32_DEBUGCTL or LBR-related MSRs
- **Call Stack Integrity**: Maintains original execution flow

### Communication Protocol

VangR3 extends MonkeyHypervisor's VMCALL interface:

```cpp
// VangR3-specific VMCALL commands
VANGR3_FIND_MOUSECLASS    // Locate MouseClassServiceCallback
VANGR3_INSTALL_HOOK       // Install EPT hook
VANGR3_SIMULATE_INPUT     // Simulate mouse input
VANGR3_REMOVE_HOOK        // Remove EPT hook
VANGR3_CHECK_LBR_SAFE     // Verify LBR safety
```

## 🛡️ Security Considerations

### Detection Vectors
- **Hypervisor Detection**: Vanguard may detect hypervisor presence
- **Timing Analysis**: Unusual input patterns may be detected
- **Memory Scanning**: Driver memory regions could be scanned
- **Behavioral Analysis**: Consistent aim patterns may trigger detection

### Mitigation Strategies
- **Randomization**: Add randomness to input timing and patterns
- **Stealth**: Leverage MonkeyHypervisor's existing stealth features
- **Minimal Footprint**: Keep driver memory usage minimal
- **Clean Shutdown**: Ensure proper cleanup on process exit

## 🧪 Testing

### VM Testing (Recommended)
1. Set up VMware/VirtualBox with VT-x passthrough
2. Install Windows 10/11 in VM
3. Test VangR3 functionality without Vanguard
4. Verify EPT hooks work correctly
5. Test with Vanguard enabled (use throwaway accounts)

### Debug Mode
Build in Debug configuration for additional logging:
```cpp
#define VANGR3_DBG_PRINT(fmt, ...) DbgPrintEx(DPFLTR_IHVDRIVER_ID, DPFLTR_ERROR_LEVEL, "[VangR3] " fmt, __VA_ARGS__)
```

## 📊 Performance

### Benchmarks
- **Hook Installation**: < 1ms
- **Input Simulation**: < 0.1ms per input
- **Memory Overhead**: < 1MB driver footprint
- **CPU Impact**: < 1% additional overhead

### Optimization
- Minimal VMCALL usage
- Efficient EPT management
- Optimized input simulation
- Low-latency communication

## 🤝 Contributing

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Test thoroughly in VM environment
5. Submit a pull request

## 📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

## 🙏 Acknowledgments

- **MonkeyHypervisor**: Base hypervisor infrastructure
- **Intel VT-x**: Hardware virtualization technology
- **Research Community**: Various EPT hooking techniques and LBR evasion methods

## ⚠️ Legal Notice

This software is provided for educational and research purposes only. The authors are not responsible for any misuse of this software. Users are responsible for complying with all applicable laws and terms of service.

VangR3

VangR3 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

VangR3

VangR3 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README