REcon Conference Talks & Presentations

Recon Conference

Burned in AshesBaseband Fairy Tale Stories

Exploring remote protocols in Baseband, reverse engineering methodologies, and bug discovery in mobile communication systems.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Recon Conference

Snow Crashing Virtual Reality - 2019 Edition

Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Recon Conference

Mining Disputed Territories - Studying Attacker Signatures

Explore attacker dynamics and signatures in cyber conflicts, leveraging insights for proactive defense and enhanced situational awareness in the cybersecurity landscape.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Recon Conference

The Unseen Dangers of Bloatware

Explore critical vulnerabilities in pre-installed software on Dell and Lenovo PCs, examining the security risks posed by bloatware and the balance between convenience and user safety.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Recon Conference

The Road to Qualcomm Trust Zone Apps Fuzzing

Explore Trusted Execution Environment vulnerabilities in Qualcomm's TEE, reverse engineering techniques, and fuzzing methods for TrustZone apps in mobile device security research.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Recon Conference

MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection

Electromagnetic fault injection attack on Trezor Bitcoin wallet reveals recovery seed without physical tampering. Explores vulnerability, demonstrates attack method, and discusses countermeasures for hardware wallets.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Recon Conference

Unveiling the Underground World of Anti-Cheats

Explore the ongoing battle between cheat developers and anti-cheat technologies in gaming. Learn about bypassing techniques and tools for testing anti-cheat software effectiveness.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Recon Conference

The Last Generic Win32K KASLR Defeat in Windows

Detailed exploration of Windows kernel security, focusing on KASLR defeats, heap vulnerabilities, and recent changes in RS4. Insights into potential exploits and current Windows KASLR state.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Recon Conference

Attacking Hexagon Security Analysis of Qualcomm's ADSP

Explore Qualcomm's Hexagon ADSP security, architecture, and exploitation techniques. Learn reverse engineering methodologies for proprietary systems and mitigations bypass on Android devices.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Recon Conference

Reversing and Exploiting Broadcom Bluetooth

Insights into reverse engineering Broadcom Bluetooth firmware, including InternalBlue framework, patching techniques, and discovered vulnerabilities CVE-2018-19860 and CVE-2019-6994.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Recon Conference

Automation Techniques in C++ Reverse Engineering

Explore automated dynamic analysis techniques for C++ reverse engineering, focusing on structure usage, function argument types, and inheritance relationships through DLL injection.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Recon Conference

Backdoor Foundry - A Toolchain for Building Application Specific Implants

Explore the creation of application-specific implants using ELF files. Learn about executable containers, software build lifecycle, and advanced techniques for backdoor development in this in-depth technical presentation.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Recon Conference

Defeating APT10 Compiler-level Obfuscation

Explore techniques to automatically de-obfuscate APT10's ANEL malware, focusing on opaque predicates and control flow flattening. Learn to modify IDA Pro plugins for effective malware analysis.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Recon Conference

The Path to the Payload - Android Edition

Uncover sophisticated Android malware techniques: obfuscation, anti-analysis, encrypted configs, and fake commands. Learn to reverse-engineer and reveal hidden payloads in this advanced security deep-dive.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Recon Conference

Vectorized Emulation - Putting It All Together

Explore vectorized emulation's potential in fuzzing, leveraging AVX-512 for parallel VM execution, enhanced code coverage, and hardware-accelerated taint tracking for improved vulnerability detection.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk