Recon Conference Courses

MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection

Electromagnetic fault injection attack on Trezor Bitcoin wallet reveals recovery seed without physical tampering. Explores vulnerability, demonstrates attack method, and discusses countermeasures for hardware wallets.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Unveiling the Underground World of Anti-Cheats

Explore the ongoing battle between cheat developers and anti-cheat technologies in gaming. Learn about bypassing techniques and tools for testing anti-cheat software effectiveness.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Last Generic Win32K KASLR Defeat in Windows

Detailed exploration of Windows kernel security, focusing on KASLR defeats, heap vulnerabilities, and recent changes in RS4. Insights into potential exploits and current Windows KASLR state.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Attacking Hexagon Security Analysis of Qualcomm's ADSP

Explore Qualcomm's Hexagon ADSP security, architecture, and exploitation techniques. Learn reverse engineering methodologies for proprietary systems and mitigations bypass on Android devices.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Reversing and Exploiting Broadcom Bluetooth

Insights into reverse engineering Broadcom Bluetooth firmware, including InternalBlue framework, patching techniques, and discovered vulnerabilities CVE-2018-19860 and CVE-2019-6994.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Automation Techniques in C++ Reverse Engineering

Explore automated dynamic analysis techniques for C++ reverse engineering, focusing on structure usage, function argument types, and inheritance relationships through DLL injection.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Backdoor Foundry - A Toolchain for Building Application Specific Implants

Explore the creation of application-specific implants using ELF files. Learn about executable containers, software build lifecycle, and advanced techniques for backdoor development in this in-depth technical presentation.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Defeating APT10 Compiler-level Obfuscation

Explore techniques to automatically de-obfuscate APT10's ANEL malware, focusing on opaque predicates and control flow flattening. Learn to modify IDA Pro plugins for effective malware analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

The Path to the Payload - Android Edition

Uncover sophisticated Android malware techniques: obfuscation, anti-analysis, encrypted configs, and fake commands. Learn to reverse-engineer and reveal hidden payloads in this advanced security deep-dive.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Vectorized Emulation - Putting It All Together

Explore vectorized emulation's potential in fuzzing, leveraging AVX-512 for parallel VM execution, enhanced code coverage, and hardware-accelerated taint tracking for improved vulnerability detection.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Seeing Inside the Encrypted Envelope

Explore techniques for uncovering vulnerabilities in encrypted messaging apps, with insights on tooling, approaches, and lessons learned from analyzing popular platforms.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The ROM Matrix Revolution - Unscrambling Bits

Explore ROM encryption vulnerabilities and decryption techniques using visual analysis and software tools, with insights applicable to various chip families.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

SiliVaccine - North Korea's Weapon of Mass Detection

Explore North Korea's SiliVaccine, a secretive national antivirus solution. Uncover its architecture, origins, and peculiarities through reverse engineering, revealing insights into DPRK's closed digital landscape.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

PreVice - Static Detection of Hooking Capabilities in Machine Code

Explore static analysis techniques for detecting hooking capabilities in Windows executables, including Detours, import, and syscall hooking, with insights from scanning millions of files.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Reverse Engineering Windows Defender Part II

Deep dive into Windows Defender's binary emulator, exploring its internals, virtual environment, and integration with antivirus features. Gain insights on reverse engineering techniques for advanced malware analysis.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Conference Talk