Recon Conference Courses

Reversing IoT - Xiaomi Ecosystem

Explore Xiaomi IoT ecosystem security, firmware extraction, and cloud communication. Learn to modify devices, implement new functions, and gain independence from proprietary cloud services.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Harnessing Intel Processor Trace on Windows for Fuzz

Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Reverse Engineering Windows Defender's JavaScript Engine

Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

DIY ARM Debugger for Wi-Fi Chips

Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Brussels 2018 - Starcraft: Emulating a Buffer Overflow for Fun and Profit

Explore reverse engineering techniques used to emulate a buffer overflow in StarCraft, addressing challenges in preserving popular mods while enhancing game security.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Free Video

Robin Hood vs Cisco ASA AnyConnect

Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Hacking Toshiba Laptops

Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Neurosurgery for Industrial Routers - Security of Sarian OS

Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Dissecting QNX

Comprehensive analysis of QNX's security features, including exploit mitigations and random number generators, revealing vulnerabilities and design issues in critical embedded systems.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Decompiler Internals - Microcode

Explore the intermediate language used in Hex-Rays Decompiler, its simplicity and power in representing programs, and plans for publication and programmatic access.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

When Virtual Hell Freezes Over - Reversing C++ Code

Automated techniques for reversing complex C++ code, focusing on rebuilding inheritance, identifying templates, and tracing program flow to simplify the reverse engineering process.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk