# VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low

<https://repo.masters-masters.com/en/repos/VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low>

[Home](https://repo.masters-masters.com/en) › [VirtualAlllocEx](https://repo.masters-masters.com/en/owners/VirtualAlllocEx) › [Direct-Syscalls-A-journey-from-high-to-low](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low)

VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low has 147 stars on GitHub. Its RepoMasters card: Prototype tier. Start with shellcode execution using…

| Field | Value |
| --- | --- |
| Owner | [VirtualAlllocEx](https://repo.masters-masters.com/en/owners/VirtualAlllocEx) |
| Stars | 147 |
| Forks | 27 |
| Language | [C](https://repo.masters-masters.com/en/languages/c) |
| License | None |
| Created | 2023 |
| Topics | av-bypass, av-evasion, direct-syscalls, edr-bypass, edr-evasion |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low](https://github.com/VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low) |

## Repository

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by VirtualAlllocEx

- [VirtualAlllocEx/DEFCON-31-Syscalls-Workshop · ★ 788 · C · Beta](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/DEFCON-31-Syscalls-Workshop)
- [VirtualAlllocEx/Create-Thread-Shellcode-Fetcher · ★ 259 · C++ · Alpha](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/Create-Thread-Shellcode-Fetcher)
- [VirtualAlllocEx/Payload-Download-Cradles · ★ 258 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/Payload-Download-Cradles)
- [VirtualAlllocEx/Direct-Syscalls-vs-Indirect-Syscalls · ★ 251 · C · Alpha](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/Direct-Syscalls-vs-Indirect-Syscalls)
- [VirtualAlllocEx/HWBP-DEP-Bypass · ★ 101 · C · Prototype](https://repo.masters-masters.com/en/repos/VirtualAlllocEx/HWBP-DEP-Bypass)

## Nearby in C

- [sgkdev/packet\_edit\_meme · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/sgkdev/packet_edit_meme)
- [TheRepairforge/PocketOBI · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/TheRepairforge/PocketOBI)
- [Rotmill/Dino-Crisis-Modern-Edition · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/Rotmill/Dino-Crisis-Modern-Edition)
- [posixninja/spirit-linux · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/posixninja/spirit-linux)
- [alexdu/piggyphoto · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/alexdu/piggyphoto)
- [ezmobius/super-nginx · ★ 147 · C · Prototype](https://repo.masters-masters.com/en/repos/ezmobius/super-nginx)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.