Live Learning
Session Schedule
126 episodes and over 250 hours of recorded content across both the TrueCyber and legacy Mr.Un1k0d3r platforms. Weekly live coding and red team training sessions, all recorded and available to subscribers. Get a subscription →
TrueCyber Episodes (45)
| Date | Topic | Tags |
|---|---|---|
| Wednesday December 2 2026 at 7 PM EST | Ep. 45 - C2 module that will make capturing credentials much easier. | C2 C |
| Wednesday November 11 2026 at 7 PM EST | Ep. 44 - Hiding Your Network Traffic from EDRs: A Simple Implementation. | Network C2 |
| Wednesday October 28 2026 at 7 PM EST | Ep. 43 - AI is widely adopted, and it has introduced vulnerabilities that we often forget about. What should you be looking for that has been overlooked or forgotten? | AI Vulnerabilities |
| Wednesday September 30 2026 at 7 PM EST | Ep. 42 - The forgotten Red Teamer skills: web application testing and the methodology used to compromise a target. | Web Red Teaming |
| Wednesday July 29 2026 at 7 PM EST | Ep. 41 - Hooking on Linux to inspect encrypted traffic before it reaches the encryption APIs. | Network Reverse Engineering Linux |
| Wednesday July 15 2026 at 7 PM EST | Ep. 40 - Thick Client Methodology: How to Approach Thick Client Testing During Red Team and Penetration Testing Engagements. | Reverse Engineering Windows |
| Wednesday June 24 2026 at 7 PM EST | Ep. 39 - Modularising and porting your favorite tool to BOF: tips and tricks. | BOF C |
| Wednesday May 27 2026 at 7 PM EST | Ep. 38 - External reconnaissance: how to remain stealthy and bypass detection systems. | External Scripting |
| Wednesday May 6 2026 at 7 PM EST | Ep. 37 - The BlueHammer case. What are TOCTOU bugs and why are they interesting? How to exploit and abuse this bug family. | Windows TOCTOU Exploit |
| Wednesday April 15 2026 at 7 PM EST | Ep. 36 - Windows internal recap. What to look for and what matters when you are trying to understand the internals to evade EDRs and detection. | Windows EDRs |
| Wednesday April 1 2026 PM EST | Ep. 35 - Lateral movement and execution techniques from an OPSEC perspective that are safe to run. | Windows Lateral Movement |
| Wednesday March 4 2026 at 7 PM EST | Ep. 34 - Running a process through impersonation. The proper way. | Windows C DuplicateToken |
| Wednesday February 11 2026 PM EST | Ep. 33 - Revisiting the obfuscation concept to hide your payload. | Obfuscation Coding |
| Wednesday January 28 2026 PM EST | Ep. 32 - Building your web stack for your C2. | C2 Azure |
| Wednesday January 7 2026 at 7 PM EST | Ep. 31 - Exploring and understanding how to identify vulnerable kernel drivers that can be exploited. | Windows Kernel |
| Wednesday December 3 2025 at 7 PM EST | Ep. 30 - Special Episode: Flare.io presentation. How leaked credentials can be misued and used during red team exercise. | Windows Flare |
| Wednesday November 5 2025 at 7 PM EST | Ep. 29 - Building and using your toolset to identify Azure attack vectors. Part III | Azure Python3 |
| Wednesday October 15 2025 at 7 PM EST | Ep. 28 - Building and using your toolset to identify Azure attack vectors. Part II | Azure Python3 |
| Wednesday October 1 2025 at 7 PM EST | Ep. 27 - Building and using your toolset to identify Azure attack vectors. Part I | Azure Python3 |
| Wednesday September 3 2025 at 7 PM EST | Ep. 26 - Running your own LLM locally and building a simple interface to use it | LLM C# llama3 |
| Wednesday August 6 2025 at 7 PM EST | Ep. 25 - Understanding the underlying concepts of ADCS and how certificate templates can be audited using C#. | C# ADCS |
| Wednesday July 23 2025 at 7 PM EST | Ep. 24 - Auditing and searching for misconfigured GPOs using C#. | C# GPO Active Directory |
| Wednesday July 2 2025 at 7 PM EST | Ep. 23 - Writing your own SOCKS4a proxy in C#. | C# SOCK4a |
| Wednesday June 4 2025 at 7 PM EST | Ep. 22 - Incorporating sandbox evasion techniques into your malware using C and C#. | Evasion C C# |
| Friday May 16 2025 at 1 PM EST | Ep. 21 - Chaining of the .NET no-memory-modification technique with remote shellcode loading and shellcode memory encryption to evade detection. All live from NorthSec. | .Net NorthSec 2025 |
| Wednesday April 23 2025 at 7 PM EST | Ep. 20 - Understanding Azure and Graph: Automation of user enumeration and more. | Azure Graph Python |
| Wednesday April 16 2025 at 7 PM EST | Ep. 19 - Gathering user information without using LDAP queries in an Active Directory domain using WMI. | C COM WMI Active Directory |
| Wednesday March 12 2025 at 7 PM EDT | Ep. 18 - Gathering user information without using LDAP queries in an Active Directory domain using Lsa* APIs. | C Lsa APIs Active Directory |
| Wednesday February 26 2025 at 7 PM EDT | Ep. 17 - Code obfuscation using the power of assembly. | C Obfuscation Assembly |
| Wednesday February 12 2025 at 7 PM EDT | Ep. 16 - Customizing your toolset to avoid detection: A case study using PingCastle. | C# Obfuscation PingCastle |
| Wednesday January 29 2025 at 7 PM EDT | Ep. 15 - Writing your own scanner in C and C# and evading million-dollar deception devices. | C C# Port Scanner |
| Wednesday January 22 2025 at 7 PM EDT | Ep. 14 - Remote service enumeration in C without the need of administrative privileges. The C file can be compiled as a BOF too. | C BOF LookupAccountNameA |
| Wednesday December 11 2024 at 7 PM EDT | Ep. 13 - From Azure phishing to remote code execution. | Azure Cloud Phishing Python |
| Wednesday November 27 2024 at 5 PM EDT | Ep. 12 - Running shellcode within C# without modifying the memory permissions. | C# CIL Obfusacation |
| Wednesday November 13 2024 at 7 PM EDT | Ep. 11 - Azure device code phishing? What about Google Code Flow to phish Google Cloud based company. | Google Cloud Phishing Python |
| Wednesday October 30 2024 at 7 PM EDT | Ep. 10 - Implementing a namedpipe C2 in C#. | C# NamedPipe Command & Control |
| Wednesday October 9 2024 at 7 PM EDT | Ep. 9 - The art of understanding how things are working to become a better hacker. | C Proxying RPC Reverse Engineering |
| Wednesday September 25 2024 at 7 PM EDT | Ep. 8 - BLASTRADIUS CVE-2024-3596 A study case of MD5 collision. | BLASTRADIUS MD5 collision AES attack |
| Tuesday September 10 2024 at 7 PM EDT | Ep. 7 - The power of BOF. | C Cobalt Strike BOF |
| Wednesday August 14 2024 at 7 PM EDT | Ep. 6 - Building your C2 communication channel. | Azure C2 Cobalt Strike |
| Wednesday July 31 2024 at 7 PM EDT | Ep. 5 - Leveraging the compiler to obfuscate your code. Avoid compiler pitfalls that can break your obfuscation. | C Compiler Obfuscation GCC |
| Wednesday July 17 2024 at 7 PM EDT | Ep. 4 - Reverse engineering .net application. | DnSpy C# Reverse Engineering |
| Wednesday July 3 2024 at 7 PM EDT | Ep. 3 - Reverse engineering compiled C code. | Reverse Engineering IDA C |
| Wednesday June 19 2024 at 7 PM EDT | Ep. 2 - Using Sysmon to detect attacks and understand the artefact associated with our attacks. | Sysmon Red Team Blue Team |
| Thursday June 6 2024 at 7 PM EDT | Ep. 1 - Welcome to TrueCyber | Introduction Not technical |
Legacy Episodes - Original Mr.Un1k0d3r Platform (81)
| Date | Topic | Tags |
|---|---|---|
| Wednesday September 1 2021 at 7 PM EDT | Ep. 81 - Summer 10 - RPC Magic Continued | RPC Windows Lateral-movement |
| Wednesday August 25 2021 at 7 PM EDT | Ep. 80 - Summer 09 - Jake on CI/CD for Offensive Security | CI/CD DevOps Guest |
| Wednesday August 18 2021 at 7 PM EDT | Ep. 79 - Summer 08 - Custom Loader | Loader Shellcode Evasion |
| Wednesday August 11 2021 at 7 PM EDT | Ep. 78 - Summer 07 - Killing ATP, Local Admin and Firewall | ATP Evasion Firewall |
| Wednesday August 4 2021 at 7 PM EDT | Ep. 77 - Summer 06 - RPC Magic | RPC Windows Lateral-movement |
| Wednesday July 28 2021 at 7 PM EDT | Ep. 76 - Summer 05 - Your Own Obfuscation Framework | Obfuscation Framework Evasion |
| Wednesday July 21 2021 at 7 PM EDT | Ep. 75 - Summer 04 - Nim by S3cur3Th1sSh1t | Nim Evasion Guest |
| Wednesday July 14 2021 at 7 PM EDT | Ep. 74 - Summer 03 - MSBuild Secret Sauce | MSBuild LOLBIN Evasion |
| Wednesday July 7 2021 at 7 PM EDT | Ep. 73 - Summer 02 - TrustedInstaller and EDRs | Trustedinstaller EDR Privilege-escalation |
| Wednesday June 30 2021 at 7 PM EDT | Ep. 72 - Summer 01 - Metasploit Railgun | Metasploit Railgun Exploitation |
| Wednesday March 1 2023 at 7 PM EDT | Ep. 71 - S08E08 - EDRs and Honeypots | EDR Honeypot Detection |
| Wednesday February 22 2023 at 7 PM EDT | Ep. 70 - S08E07 - Writing C is Fun | C Windows Development |
| Wednesday February 15 2023 at 7 PM EDT | Ep. 69 - S08E06 - Cobalt Strike Funzy | Cobalt-strike C2 Red-team |
| Wednesday February 8 2023 at 7 PM EDT | Ep. 68 - S08E05 - Initial Access Recap | Initial-access Red-team Fundamentals |
| Wednesday February 1 2023 at 7 PM EDT | Ep. 67 - S08E04 - DevOps with Kumo | DevOps Infrastructure Tooling |
| Wednesday January 25 2023 at 7 PM EDT | Ep. 66 - S08E03 - Azure and Extended JWT Tokens | Azure JWT Cloud |
| Wednesday January 18 2023 at 7 PM EDT | Ep. 65 - S08E02 - The LDAP World | LDAP Active-directory Enumeration |
| Wednesday January 11 2023 at 7 PM EDT | Ep. 64 - S08E01 - Waldo Debugging Tricks | Debugging Reverse-engineering Windows |
| Wednesday December 21 2022 at 7 PM EDT | Ep. 63 - S07E06 - Christmas Special | Red-team Special |
| Wednesday October 5 2022 at 7 PM EDT | Ep. 62 - S07E05 - Code Flow Obfuscation | Obfuscation Control-flow Evasion |
| Wednesday September 28 2022 at 7 PM EDT | Ep. 61 - S07E04 - Phishing Funzy | Phishing Initial-access Social-engineering |
| Wednesday September 21 2022 at 7 PM EDT | Ep. 60 - S07E03 - Cookie Stealer Part 3 | Credential-theft Cookies Post-exploitation |
| Wednesday September 14 2022 at 7 PM EDT | Ep. 59 - S07E02 - Cookie Stealer Part 2 | Credential-theft Cookies Post-exploitation |
| Wednesday September 7 2022 at 7 PM EDT | Ep. 58 - S07E01 - Cookie Stealer Part 1 | Credential-theft Cookies Post-exploitation |
| Wednesday June 29 2022 at 7 PM EDT | Ep. 57 - S06E13 - C2 in C++ | C2 C++ Development |
| Wednesday June 22 2022 at 7 PM EDT | Ep. 56 - S06E12 - MSIL Obfuscation in C# | Obfuscation C# MSIL |
| Wednesday June 15 2022 at 7 PM EDT | Ep. 55 - S06E11 - C2 Development Part 8 | C2 Development Red-team |
| Wednesday June 8 2022 at 7 PM EDT | Ep. 54 - S06E10 - C2 Development Part 7 | C2 Development Red-team |
| Wednesday June 1 2022 at 7 PM EDT | Ep. 53 - S06E09 - C2 Development Part 6 | C2 Development Red-team |
| Wednesday May 25 2022 at 7 PM EDT | Ep. 52 - S06E08 - C2 Development Part 5 | C2 Development Red-team |
| Wednesday May 18 2022 at 7 PM EDT | Ep. 51 - S06E07 - C2 Development Part 4 | C2 Development Red-team |
| Wednesday May 11 2022 at 7 PM EDT | Ep. 50 - S06E06 - Prelude Security - New Technologies | Prelude Tooling Red-team |
| Wednesday May 4 2022 at 7 PM EDT | Ep. 49 - S06E05 - C2 Development Part 3 | C2 Development Red-team |
| Wednesday April 27 2022 at 7 PM EDT | Ep. 48 - S06E04 - C2 Development Part 2 | C2 Development Red-team |
| Wednesday April 20 2022 at 7 PM EDT | Ep. 47 - S06E03 - C2 Development Part 1 | C2 Development Red-team |
| Wednesday April 13 2022 at 7 PM EDT | Ep. 46 - S06E02 - The Invisible Shellcode | Shellcode Evasion Stealth |
| Wednesday April 6 2022 at 7 PM EDT | Ep. 45 - S06E01 - The C2 Introduction | C2 Red-team Fundamentals |
| Wednesday March 16 2022 at 7 PM EDT | Ep. 44 - S05E11 - Reflective Loader Magic | Reflective-loading Evasion Windows |
| Wednesday March 9 2022 at 7 PM EDT | Ep. 43 - S05E10 - Prelude Framework Presentation | Prelude C2 Red-team |
| Wednesday March 2 2022 at 7 PM EDT | Ep. 42 - S05E09 - DLL Sideloading | DLL Sideloading Evasion |
| Wednesday February 23 2022 at 7 PM EDT | Ep. 41 - S05E08 - Mailslot and ETW | Mailslot ETW IPC |
| Wednesday February 16 2022 at 7 PM EDT | Ep. 40 - S05E07 - ParanoidNinja on ETW and PIC | ETW PIC Evasion |
| Wednesday February 9 2022 at 7 PM EDT | Ep. 39 - S05E06 - An0n and the Cobalt Strike Artifact Kit | Cobalt-strike Artifact-kit Evasion |
| Wednesday February 2 2022 at 7 PM EDT | Ep. 38 - S05E05 - EDR Workarounds and Ideas | EDR Evasion Red-team |
| Wednesday January 12 2022 at 7 PM EDT | Ep. 37 - S05E02 - Import Address Table and Export Address Table | PE IAT Windows |
| Wednesday January 5 2022 at 7 PM EDT | Ep. 36 - S05E01 - Position Independent Code for Red Teamers | PIC Shellcode Red-team |
| Wednesday October 27 2021 at 7 PM EDT | Ep. 35 - S04E09 - Hiding in the Cave | Evasion Steganography Windows |
| Wednesday October 20 2021 at 7 PM EDT | Ep. 34 - S04E08 - Cobalt Strike 4.5 Release | Cobalt-strike C2 Red-team |
| Wednesday October 13 2021 at 7 PM EDT | Ep. 33 - S04E07 - Phishing Tricks for Fun and Profit | Phishing Initial-access Social-engineering |
| Wednesday October 6 2021 at 7 PM EDT | Ep. 32 - S04E06 - Heap Encryption by WaldoIRC | Heap Encryption Evasion |
| Wednesday September 29 2021 at 7 PM EDT | Ep. 31 - S04E05 - Fooling the Sandbox | Sandbox Evasion Anti-analysis |
| Wednesday September 15 2021 at 7 PM EDT | Ep. 30 - S04E03 - C Obfuscation With Love and Assembly | Obfuscation C Assembly |
| Wednesday September 8 2021 at 7 PM EDT | Ep. 29 - S04E02 - PetitPotam and AD CS | Active-directory ADCS Exploitation |
| Wednesday September 1 2021 at 7 PM EDT | Ep. 28 - S04E01 - ETW and AMSI Bypass Revisited | ETW AMSI Evasion |
| Wednesday July 28 2021 at 7 PM EDT | Ep. 27 - S03E08 - ROP Chain Introduction | ROP Exploitation Buffer-overflow |
| Wednesday July 14 2021 at 7 PM EDT | Ep. 26 - S03E06 - Buffer Overflow Underlying Concepts | Buffer-overflow Exploitation Fundamentals |
| Wednesday July 7 2021 at 7 PM EDT | Ep. 25 - S03E05 - Linux Shellcoding and Assembly | Shellcode Assembly Linux |
| Wednesday June 30 2021 at 7 PM EDT | Ep. 24 - S03E04 - The Dark COM World | COM Windows Persistence |
| Wednesday June 16 2021 at 7 PM EDT | Ep. 23 - S03E02 - WaldoIRC Detection and Tricks | Detection Evasion C2 |
| Wednesday June 9 2021 at 7 PM EDT | Ep. 22 - S03E01 - LDAP Magic Using C# | LDAP C# Active-directory |
| Wednesday May 26 2021 at 7 PM EDT | Ep. 21 - S02E13 - Resolving Syscalls at Runtime | Syscalls Evasion Windows |
| Wednesday May 19 2021 at 7 PM EDT | Ep. 20 - S02E12 - WTS, .NET and DCE/RPC Magic | RPC .NET Windows |
| Wednesday May 12 2021 at 7 PM EDT | Ep. 19 - S02E11 - byt3bl33d3r and the Nim Case | Nim Evasion Tooling |
| Wednesday May 5 2021 at 7 PM EDT | Ep. 18 - S02E10 - The Cobalt Strike Case and BOF Files | Cobalt-strike BOF C2 |
| Wednesday April 28 2021 at 7 PM EDT | Ep. 17 - S02E09 - The Art of Phishing | Phishing Initial-access Social-engineering |
| Wednesday April 21 2021 at 7 PM EDT | Ep. 16 - S02E08 - Hooking Windows APIs | Hooking Windows API |
| Wednesday April 14 2021 at 7 PM EDT | Ep. 15 - S02E07 - C# HTTP Command and Control | C2 C# HTTP |
| Wednesday April 7 2021 at 7 PM EDT | Ep. 14 - S02E06 - Evasion and Obfuscation in C | Evasion Obfuscation C |
| Wednesday March 31 2021 at 7 PM EDT | Ep. 13 - S02E05 - Unhooking EDRs Part 2 | EDR Unhooking Evasion |
| Wednesday March 31 2021 at 7 PM EDT | Ep. 12 - S02E05 - Unhooking EDRs Part 1 | EDR Unhooking Evasion |
| Wednesday March 24 2021 at 7 PM EDT | Ep. 11 - S02E04 - AMSI and C# | AMSI C# Evasion |
| Wednesday March 17 2021 at 7 PM EDT | Ep. 10 - S02E03 - Process Injection in C and C# | Process-injection C C# Windows |
| Wednesday March 10 2021 at 7 PM EDT | Ep. 9 - S02E02 - Demystifying C | C Windows Fundamentals |
| Wednesday March 3 2021 at 7 PM EDT | Ep. 8 - S02E01 - Windows Direct Syscalls in C | Syscalls C Windows Evasion |
| Wednesday February 17 2021 at 7 PM EDT | Ep. 7 - S01E07 - Lateral Movement and the SCShell Case | Lateral-movement Windows Red-team |
| Wednesday February 10 2021 at 7 PM EDT | Ep. 6 - S01E06 - Fooling the EDR | EDR Evasion Windows |
| Wednesday February 3 2021 at 7 PM EDT | Ep. 5 - S01E05 - Shellcode Encoder | Shellcode Encoding Evasion |
| Wednesday January 27 2021 at 7 PM EDT | Ep. 4 - S01E04 - Shellcoding PEB and SendMessage Injection | Shellcode Process-injection Windows |
| Wednesday January 27 2021 at 7 PM EDT | Ep. 3 - S01E04 - Shellcoding Live Demo | Shellcode Demo |
| Wednesday January 20 2021 at 7 PM EDT | Ep. 2 - S01E03 - Shellcoding Part 2 | Shellcode Assembly Windows |
| Wednesday January 13 2021 at 7 PM EDT | Ep. 1 - S01E02 - Introduction to Shellcoding and Assembly | Shellcode Assembly Windows |
Over 250 hours of recorded content - subscribers get access to the full archive across both platforms.