REcon Conference Talks & Presentations

Recon Conference

Harnessing Intel Processor Trace on Windows for Fuzz

Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Recon Conference

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Recon Conference

Reverse Engineering Windows Defender's JavaScript Engine

Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

Recon Conference

DIY ARM Debugger for Wi-Fi Chips

Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Recon Conference

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Recon Conference

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Conference

Robin Hood vs Cisco ASA AnyConnect

Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Recon Conference

Hacking Toshiba Laptops

Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Recon Conference

Neurosurgery for Industrial Routers - Security of Sarian OS

Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Conference

Dissecting QNX

Comprehensive analysis of QNX's security features, including exploit mitigations and random number generators, revealing vulnerabilities and design issues in critical embedded systems.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Recon Conference

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Recon Conference

Decompiler Internals - Microcode

Explore the intermediate language used in Hex-Rays Decompiler, its simplicity and power in representing programs, and plans for publication and programmatic access.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

Recon Conference

When Virtual Hell Freezes Over - Reversing C++ Code

Automated techniques for reversing complex C++ code, focusing on rebuilding inheritance, identifying templates, and tracing program flow to simplify the reverse engineering process.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Recon Conference

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Toolset for detecting vulnerabilities in iOS apps: download and decrypt, decompile, statically analyze, and present results. Focuses on high-level semantics reconstruction and common mobile app security flaws.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Recon Conference

Breaking Code Read Protection on the NXP LPC-Family Microcontrollers

Explore bypassing Code Read Protection in NXP LPC microcontrollers through bootloader exploitation and glitch attacks. Learn hardware/software design for a simple glitcher to disable CRP and access FLASH contents.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk