REcon Conference Talks & Presentations

Recon Conference

Seeing Inside the Encrypted Envelope

Explore techniques for uncovering vulnerabilities in encrypted messaging apps, with insights on tooling, approaches, and lessons learned from analyzing popular platforms.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Recon Conference

The ROM Matrix Revolution - Unscrambling Bits

Explore ROM encryption vulnerabilities and decryption techniques using visual analysis and software tools, with insights applicable to various chip families.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Recon Conference

SiliVaccine - North Korea's Weapon of Mass Detection

Explore North Korea's SiliVaccine, a secretive national antivirus solution. Uncover its architecture, origins, and peculiarities through reverse engineering, revealing insights into DPRK's closed digital landscape.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Recon Conference

PreVice - Static Detection of Hooking Capabilities in Machine Code

Explore static analysis techniques for detecting hooking capabilities in Windows executables, including Detours, import, and syscall hooking, with insights from scanning millions of files.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Recon Conference

Reverse Engineering Windows Defender Part II

Deep dive into Windows Defender's binary emulator, exploring its internals, virtual environment, and integration with antivirus features. Gain insights on reverse engineering techniques for advanced malware analysis.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

Recon Conference

Breath of the RF Field

Explore Amiibo technology, reverse engineering, and NFC protocol vulnerabilities in Nintendo consoles using software-defined radio and a custom simulator for security research.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Recon Conference

Meet Salinas - The First Ever SMS-Commanded Car Infotainment RAT

Discover how researchers created the first SMS-controlled malware for car infotainment systems, exploring vulnerabilities and potential threats in modern vehicle technology.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

Recon Conference

Pwning Intel PIN

Exploring vulnerabilities in Intel PIN's dynamic binary instrumentation framework, challenging assumptions of isolation and stealthiness, and demonstrating potential security risks in instrumented programs.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Recon Conference

Building a Damned Good Watch

Cloning a calculator watch with added radio capabilities for Morse code transmission, frequency detection, and remote control signal replication. Includes practical insights and open-source code.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Recon Conference

Tracing Struct Accesses with Struct Stalker

Explore Struct Stalker, an LLDB script for tracing struct/object accesses in C/C++ apps. Learn about LLDB scripting and innovative memory access tracking techniques.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Recon Conference

Static Instrumentation Based on Executable File Formats

Static instrumentation techniques for executable files without modifying code or system environment. Enables architecture-independent injection and hooking without privileged access, suitable for integrity checking and non-rooted environments.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Recon Conference

Discovering the iOS Instruments Server

Reverse-engineering of iOS privileged server providing sensitive data to Apple's debugging tools. Explores techniques used to uncover and analyze this critical system component.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Recon Conference

Exploiting Userland Vulnerabilities to Get Rogue App Installed Remotely on iOS 11

Exploiting iOS11 vulnerabilities to remotely install rogue apps, bypassing security enhancements and code signing requirements without kernel exploits. Techniques for sandbox escape and persistent installation demonstrated.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Recon Conference

An Open-Source Machine-Code Decompiler

Explore RetDec, an open-source machine-code decompiler for analyzing binary applications. Learn about its components, applications in reverse engineering, and real-world examples demonstrated by Avast developers.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Recon Conference

Malware Analysis and Automation using Binary Ninja

Explore malware analysis automation using Binary Ninja platform. Learn to adapt quickly to evolving threats, perform basic analysis, and utilize API for configuration data extraction from real-world samples.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk