Recon Conference Courses

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Toolset for detecting vulnerabilities in iOS apps: download and decrypt, decompile, statically analyze, and present results. Focuses on high-level semantics reconstruction and common mobile app security flaws.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Breaking Code Read Protection on the NXP LPC-Family Microcontrollers

Explore bypassing Code Read Protection in NXP LPC microcontrollers through bootloader exploitation and glitch attacks. Learn hardware/software design for a simple glitcher to disable CRP and access FLASH contents.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware

Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Recon 2017 Brussels - r2m2 by Guillaume "guedou" Valadon

Presentation on r2m2, a radare2 plugin leveraging miasm2 for reversing rare CPU architectures. Demonstrates integration of powerful reverse engineering tools and simplifies implementation of new architectures.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

A Little Less Conversation, A Little More ActionScript

Techniques for in-depth reverse engineering of Flash, mapping ActionScript to undocumented counterparts, and analyzing vulnerabilities in Adobe Flash Player for improved exploit research.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

GRAP - Define and Match Graph Patterns Within Binaries

Herramienta para detectar patrones en código binario mediante coincidencia de grafos. Permite definir firmas personalizadas para identificar variantes de malware y extraer información valiosa.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Transforming Open Source to Open Access in Closed Applications

Exploring security risks of integrating open-source components in closed applications, focusing on Adobe Reader's XSLT engine. Techniques for auditing and finding vulnerabilities are demonstrated.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking the Most Popular Cryptocurrency Hardware Wallets

Explore vulnerabilities in popular cryptocurrency hardware wallets with experts Thomas Roth and Dmitry Nedospasov, uncovering potential security risks and attack vectors.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Using WPP and TraceLogging Tracing to Facilitate Dynamic and Static Windows

Explore advanced Windows tracing techniques using WPP and TraceLogging for enhanced dynamic and static analysis in cybersecurity investigations.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

X Ray Reverse Engineering

Explore advanced X-ray reverse engineering techniques with expert George Tarnovsky, uncovering hidden hardware secrets and enhancing your security analysis skills.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Burned in AshesBaseband Fairy Tale Stories

Exploring remote protocols in Baseband, reverse engineering methodologies, and bug discovery in mobile communication systems.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Snow Crashing Virtual Reality - 2019 Edition

Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Mining Disputed Territories - Studying Attacker Signatures

Explore attacker dynamics and signatures in cyber conflicts, leveraging insights for proactive defense and enhanced situational awareness in the cybersecurity landscape.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Unseen Dangers of Bloatware

Explore critical vulnerabilities in pre-installed software on Dell and Lenovo PCs, examining the security risks posed by bloatware and the balance between convenience and user safety.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

The Road to Qualcomm Trust Zone Apps Fuzzing

Explore Trusted Execution Environment vulnerabilities in Qualcomm's TEE, reverse engineering techniques, and fuzzing methods for TrustZone apps in mobile device security research.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk