Kunai is Valorant External using a 1-Day Exploit to Read/Write Memory.
Driverless confirmed working on Windows 10 and Windows 11, including systems with HVCI enabled.
You will need to update the Valorant External because it was updated a couple weeks ago.
Kunai uses a BYOVD (Bring Your Own Vulnerable Driver) technique temporarily for the 1-Day Exploit.
Our method is consided a 1-Day Exploit because our BYOVD is used to exploit a Patched Vulernablity in windows.
After exploiting the Vulnerability we map all Physical Memory and Hide Our Process.
BYOVD
Our Vulnernable Driver is EBIoDispatch and it's compliant with Vulnerable Driver Blocklist.
When we unload our Vulnernable Driver we change MmUnloadedDrivers Cache to be from a Critical Process.
Disgusting our Vulnernable Driver to be loaded from a Critical Process works because of our Process Hiding.
1-Day Exploit
Our 1-Day uses the BYOVD to set our KThread::PreviousMode to Kernel Mode,
and use NtOpenSection to open a handle to \Device\PhysicalMemory to bypass the SP1 (Windows Server 2003 Service Pack 1) patch.
The security patch SP1 prevents User Mode processes from opening protected handles like PhysicalMemory.
After obtaining a handle to PhysicalMemory we restore our PreviousMode and map all Physical Memory in our process.
Process Hiding
Before loading the BYOVD we use Token Impersonation to elvate our process to NT User Authority,
and we enable DACL Protection to prevent handles being opened to our process and restart the process.
Once we load the BYOVD and map all Physical Memory we unlink our Handles so they're not visible in SystemInformation,
and unlink the VAD Nodes from the Mapped Memory so it's not visible.
After we finish cleanup we set our process as a Process-Protected Light (PPL) Anti-Malware process.
The Valorant External has ESP and Aimbot that was tested in unrated.
The Features it has is Box(Corner/Full), Health Bars, Agent and Weapon Names and uses Discord Overlay.
If you get a report Valorant will take a GPU Screenshot and Discord does not block that.
