# TTPs

- [TTPs: Embedding Payloads with MSFVenom (x86)](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-embedding-payloads-with-msfvenom-x86.md): A indepth analysis of the mechanics behind embedded payloads using MSFVenom
- [TTPs: Embedding Payloads with MSFVenom (x64)](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-embedding-payloads-with-msfvenom-x64.md): Demonstrating a workflow to achieve embeded payloads on x64 executables using MSFVenom, BinaryNinja, and x64Dbg
- [TTPs: Rust vs C++](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-rust-vs-c++.md): A comparative analysis of C++ and Rust implant binaries
- [TTPs: JmpNoCall](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-jmpnocall.md): A proof of concept demonstration of custom payload and implant implementations that results in clean call stack execution of malicious code
- [TTPs: BadAsm](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-badasm.md): In this writeup we use the capabilities of inline assembly to overwrite part of our program's .text section and achieve non-standard payload self-injection and execution
- [TTPs: BadStrings](https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps/ttps-badstrings.md): In this writeup we discuss a mutli-step methodology for beating string detection by Mandiant's FLOSS string deobfuscator


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://steve-s.gitbook.io/0xtriboulet/archive/notice/ttps.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
