Recon Conference Courses

This Dump is a Puzzle - Reconstructing J2ME Firmware from an Unknown Fragmented File System

Explore techniques for reconstructing embedded Java firmwares from fragmented file systems, developing puzzle-solving algorithms to piece together unknown J2ME fragments.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Rattle - An Ethereum EVM Binary Analysis Framework

Explore Rattle, an innovative framework for analyzing Ethereum smart contracts, enhancing auditability and security in blockchain interactions through advanced binary analysis techniques.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Teaching Old Shellcode New Tricks

Explore advanced techniques to bypass security measures and enhance Metasploit x86 shellcode, incorporating automation for improved effectiveness in various deployment scenarios.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Baring the System - New Vulnerabilities in SMM of Coreboot and UEFI Based Systems

Unveiling new vulnerabilities in SMM of Coreboot and UEFI systems, exploring impacts, and discussing mitigation techniques. Includes release of CHIPSEC module for automatic detection.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

Legacy Crypto Never Dies

Explore legacy cryptography vulnerabilities and the crack.sh API for breaking DES-based protocols, with insights from David Hulton's research on widely used services still relying on outdated encryption.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

When Wireless Malware Stays on After Turning Off the Phone

Explore iPhone's wireless capabilities after shutdown, including Find My and Digital Car Key. Learn about potential security risks and firmware modifications for low-power Bluetooth malware.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Under the Hood of Wslink Multilayered Virtual Machine

Análisis detallado de la máquina virtual multicapa Wslink, explorando técnicas de ofuscación avanzadas y presentando un enfoque semiautomático para desobfuscar el malware de forma eficiente.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

A Dirty Little History

Unveiling "Branch History Injection": A new attack bypassing hardware defenses against Spectre-v2. Explore reverse engineering, exploit development, and the latest mitigations in CPU security.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The Mysterious Life of an Exception

Explore exception handling mechanics, from throw to catch, uncovering runtime interactions, DWARF unwinding, and LSDA. Introduces a Binary Ninja plugin for extracting exception info from binaries.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Under the Hood of Wslink Multilayered Virtual Machine

Detailed analysis of Wslink loader's advanced virtual machine obfuscator, exploring its techniques and demonstrating a semiautomatic deobfuscation approach using symbolic execution and concrete value treatment.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Samsara Metamorphic Engine

Explore Samsara, a viral metamorphic engine for JVM that transforms compiled targets, complicating analysis and enabling supply chain attacks from within IDEs, with added anti-debugging features.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

OopsSec - The Bad, the Worst, and the Ugly of APT

Unveiling critical mistakes in APT campaigns across global threat actors, revealing advanced TTPs, and exploring real-time monitoring of sophisticated attacks. Insights on improving organizational defense against evolving threats.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Pulling MikroTik into the Limelight

Explore MikroTik's RouterOS internals, including IPC protocols, message formats, and cryptography. Learn about a new remote jailbreak and gain insights to accelerate RouterOS security research.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Malware Wars - DarkSide Strikes Back as BlackMatter

Explore the evolution of BlackMatter ransomware, its technical aspects, and its impact on the cybersecurity landscape. Gain insights into sophisticated ransomware operators and their tactics.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Living Off the Walled Garden

Explore Windows security vulnerabilities in ELAM and PPL, revealing how overly-permissive rules can be exploited for malware protection and code execution, hampering detection efforts.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk