Giter Club home page Giter Club logo

valthrun's Introduction

Valthrun CS2 Logo

Valthrun is an open source external Counter-Strike 2 read only kernel-level gameplay enhancer.
That's a lot of descriptive words, but what does each of them mean?

  • Valthrun The name of this project
  • open source This application is open source and for everyone to learn from
  • external We do not inject any DLLs into the target process
  • read only We do not write to the CS2 process in any way, therefore being impossible to detect by scanning the process memory
  • kernel We do not use any user level WinAPIs in order to get information from the CS2 process

This project is mainly a fun example for exploring the Windows Kernel with Rust and exploring the world of game enhancements :)

WARNING

Valthrun is not a plug 'n play solution.
Instead Valthrun aims to achieve maximum stealth and stay invisible for other applications.
Please read How to use carefully and try troubleshooting issues on your own.

Features

Due to Valthrun being read-only (as of now), there are limitations on what features are possible to implement (eg. skin changer). Regardless of this limitation, Valthrun supports the following features:

  • External radar
    Publish your game for everybody on https://radar.valth.run
  • Player ESP
    ESP with a lot of configuration possibilities like: Skeleton, Boxes3D and Boxes2D
    • Configurable colors to distinguish between enemy and team players
    • ESP includes player health, a health bar, weapon and a lot more
  • Bomb Info
    • Time until the bomb detonation
    • Defuser info such as a defuse timer
    • Bomb site where the bomb is located
  • Trigger Bot
    Shoot your enemy (or team mates) as soon they enter your crosshair
  • Spectator info
    • List of player currently watching you / the observer target
  • Stream proof by default
    Never show your Valthrun overlay on any screen shares

To access Valthruns settings overlay press PAUSE.

Planned Features

  • Aimbot
  • Player competitive ranks / wins

How to use / Getting started

Please follow this guide to get started:
https://wiki.valth.run/getting-started/

Troubleshooting

If you are having issues mapping the kernel driver or starting the controller, please take a look here:
https://wiki.valth.run/category/troubleshooting

The issue you encounter is most likely covered. If you still have any questions or need assistance, feel free to checkout the official Valthrun Discord server (click to join).

VAC

The same considerations as mentioned in this link have been taken into account.
With these precautions and some minor improvements, such as omitting the Valthrun identifier and using xor encryption for strings, the driver/overlay should avoid VAC detection. However, I must clarify that I haven't extensively studied VAC, so my conclusion is speculative. Personally, I have been using a C based driver/overlay like this with CSGO for several years without ever getting VAC banned. But be aware of overwatch!
With VAC live being enabled now, use this with caution. As always take the necessary precautions into consideration.

Screenshots

Help

You can find help on the official Valthrun Discord server:
Discord Shield

valthrun's People

Contributors

current avatar fotonnn avatar metaphysical1 avatar nkxingxh avatar petrseifert avatar valthrunner avatar wolverindev avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

valthrun's Issues

Automatically de-elevate the process

#include <Windows.h>
#include <tchar.h>

int main() {
    HANDLE hToken = NULL;
    TOKEN_PRIVILEGES tokenPrivileges;
    ZeroMemory(&tokenPrivileges, sizeof(TOKEN_PRIVILEGES));

    if (OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) {
        // Step 1: Remove the administrator privileges from the process token
        LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &tokenPrivileges.Privileges[0].Luid);
        tokenPrivileges.PrivilegeCount = 1;
        tokenPrivileges.Privileges[0].Attributes = 0;

        if (AdjustTokenPrivileges(hToken, FALSE, &tokenPrivileges, sizeof(TOKEN_PRIVILEGES), NULL, NULL)) {
            if (GetLastError() == ERROR_NOT_ALL_ASSIGNED) {
                // The process does not have the requested privileges.
                // This may mean the process was not running with administrator rights in the first place.
                _tprintf(_T("Process is not running with administrator rights.\n"));
            } else {
               // success
            }
        } else {
            _tprintf(_T("AdjustTokenPrivileges failed. Error %d\n"), GetLastError());
        }

        CloseHandle(hToken);
    } else {
        _tprintf(_T("OpenProcessToken failed. Error %d\n"), GetLastError());
    }

    return 0;
}

My proposal is to use something like this to revoke admin rights from the current process instead of asking user to launch it without admin rights since it's not even possible on some windows versions especially when using system from sub-user.

error cargo

error: failed to load manifest for workspace member G:\Downloads\Compressed\Valthrun-0.3.0\kernel\interface

Caused by:
failed to load manifest for dependency valthrun-driver-shared

Caused by:
failed to read G:\Downloads\Compressed\Valthrun-0.3.0\kernel\shared\Cargo.toml

Caused by:
The system cannot find the file specified. (os error 2)

error

2023-10-11T19:08:43Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:43Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:08:44Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:44Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:08:45Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:45Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:08:47Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:47Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:08:48Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:48Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:08:49Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:08:49Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D2D4A6122C (0/1)
[2023-10-11T19:09:51Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:51Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/1)
[2023-10-11T19:09:52Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:52Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/1)
[2023-10-11T19:09:53Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:53Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/1)
[2023-10-11T19:09:54Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:54Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/1)
[2023-10-11T19:09:55Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:55Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/1)
[2023-10-11T19:09:57Z ERROR controller] Over 10 errors occurred. Waiting 1s and try again.
[2023-10-11T19:09:57Z ERROR controller] Last error: C_BasePlayerPawn::m_hController: failed to read at 0x1D29AF3122C (0/

kernel interface unavailable: The system cannot find the file specified. (0x80070002)

[<] Loading vulnerable driver, Name: IreLjArlrNJryD
[+] NtLoadDriver Status 0xc0000603
[-] Failed to register and start service for the vulnerable driver

cs2.exe is running.
[2023-10-04T02:46:29Z INFO controller::settings] App config file D:\cs2\config.yaml does not exist.
[2023-10-04T02:46:29Z INFO controller::settings] Using default config.
[2023-10-04T02:46:29Z ERROR controller] kernel interface unavailable:The system cannot find the file specified。 (0x80070002)

My version of windows is Windows11 Home Edition 22h2(22621.2361)

Weapon Name

How can I get the name of my opponent's weapon? I tried with m_hActiveweapon but can't figure out how to instantiate it with C_BasePlayerWeapon etc :/.

Failed to load vulkan-1.dll

[2023-10-13T01:06:26Z ERROR controller] Failed to load vulkan-1.dll.
[2023-10-13T01:06:26Z ERROR controller] Error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail. (os error 14001)

Error loading library 14001

a uncommon error that happens for some people, i tried every option and still gives a error, wonder if its fixable?

thank you in advance.

AMD Graphic card issues

Valthrun seems to have issues with AMD Graphic cards.
It's currently not known, what exactly is causing these issues, but the issues include:

  • Not being able to start the controller (Vulkan driver not found)
  • Having a black overlay

This issue is used to group these individual issues.

Update:
The Wiki has been updated with some potential fixes for AMD users:
https://wiki.valth.run/#/030_troubleshooting/overlay/040_amd_opengl

Cannot build, Win 10 21H2

Windows version:
image
image

Here's the error that I get when attempting to compile:
image

rustup show:
image

I have tried installing WDK and WSDK but that didn't help.

I was able to compile fine until one of the more recent commits, removing controller/src/winver.rs and removing everywhere that the function defined in it is used allows me to compile, but that's not ideal.

trigger bot not working

whenever i toggle trigger bot (pressing x im guessing) it doesnt work, can you help me please

kernel interface unavailable

Hi, I tried loading the driver and starting the controller afterwards, but I always get an error.
Here is the console output:

[<] Loading vulnerable driver, Name: wDPFeKORvYKMEzmkArcwb
[+] NtLoadDriver Status 0x0
[+] PiDDBLock Ptr 0xfffff80783b67028
[+] PiDDBCacheTable Ptr 0xfffff80783b67164
[+] PiDDBLock Locked
[+] Found Table Entry = 0xFFFF808642557680
[+] PiDDBCacheTable Cleaned
[+] g_KernelHashBucketList Found 0xFFFFF807870BF088
[+] g_HashCacheLock Locked
[+] Found In g_KernelHashBucketList: wDPFeKORvYKMEzmkArcwb
[+] g_KernelHashBucketList Cleaned
[+] MmUnloadedDrivers Cleaned: wDPFeKORvYKMEzmkArcwb
[+] Image base has been allocated at 0xFFFFD68DAE793000
[+] Skipped 0x1000 bytes of PE Header
[<] Calling DriverEntry 0xFFFFD68DAE798CA0
[+] Callback example called
[+] DriverEntry returned 0xc0000365
[<] Unloading vulnerable driver
[+] NtUnloadDriver Status 0x0
[+] Vul driver data destroyed before unlink
[+] success

[2023-09-05T13:59:00Z INFO  controller::settings] App config file config.yaml does not exist.
[2023-09-05T13:59:00Z INFO  controller::settings] Using default config.
[2023-09-05T13:59:00Z ERROR controller] kernel interface unavailable: Das System kann die angegebene Datei nicht finden. (0x80070002)

Visual: add weapon text

Hello, I have an idea to add text (somewhere around health maybe?) what weapon is player holding!

vulkan driver not found

upon opening controller.exe, i get:

[2023-10-07T18:51:07Z ERROR controller] vulkan: Unable to find a Vulkan driver: Unable to find a Vulkan driver

ESP issue

esp does not work on some players with custom player models

NOT VIRUS PROOF

kernel interface unavailable: The system cannot find the file specified. (0x80070002)

PS C:\Users\Administrator\Desktop\vcs2\kdmapper-master\x64\Release> .\kdmapper.exe .\valthrun-driver.sys
[<] Loading vulnerable driver, Name: EanCiQDaeJXukpsuWTYCLiY
[+] NtLoadDriver Status 0x0
[+] PiDDBLock Ptr 0xfffff80342d2ec3c
[+] PiDDBCacheTable Ptr 0xfffff80342d2eb88
[+] PiDDBLock Locked
[+] Found Table Entry = 0xFFFFB787FDF02C50
[+] PiDDBCacheTable Cleaned
[+] g_KernelHashBucketList Found 0xFFFFF803476BD088
[+] g_HashCacheLock Locked
[+] Found In g_KernelHashBucketList: EanCiQDaeJXukpsuWTYCLiY
[+] g_KernelHashBucketList Cleaned
[+] MmUnloadedDrivers Cleaned: EanCiQDaeJXukpsuWTYCLiY
[+] WdFilterDriverList Cleaned: \Users\ADMINI~1\AppData\Local\Temp\EanCiQDaeJXukpsuWTYCLiY
[+] Image base has been allocated at 0xFFFF948C8B530000
[+] Skipped 0x1000 bytes of PE Header
[+] Load config directory wasn't found, probably StackCookie not defined, fix cookie skipped
[<] Calling DriverEntry 0xFFFF948C8B536840
[+] Callback example called
[+] DriverEntry returned 0xc0000365
[<] Unloading vulnerable driver
[+] NtUnloadDriver Status 0x0
[+] Vul driver data destroyed before unlink
[+] success

Started CS2 and then controller.exe as admin
[2023-09-13T16:07:54Z INFO controller::settings] App config file C:\Users\Administrator\Desktop\vcs2\kdmapper-master\x64\Release\config.yaml does not exist.
[2023-09-13T16:07:54Z INFO controller::settings] Using default config.
[2023-09-13T16:07:54Z ERROR controller] kernel interface unavailable: The system cannot find the file specified. (0x80070002)

Edition Windows 11 Pro
Version 21H2
Installed on ‎09/‎07/‎2022
OS build 22000.1817
Experience Windows Feature Experience Pack 1000.22000.1817.0

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.