Recon Conference Courses

NVMe Technology in Cloud Service Providers

Discover a pre-auth remote vulnerability in Linux kernel's NVMe implementation. Learn open-source vulnerability research, static code analysis, and NVMe technology. Includes live demos and practical tips.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study

Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Dissecting the Modern Android Data Encryption Scheme

Explore Android data encryption, focusing on key generation, storage, and vulnerabilities. Learn about File-Based Encryption, TEE, Secure Element, and attack strategies using software vulnerabilities on Samsung A22 and Pixel 3a.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Ice Ice Baby - Coppin' RAM With DIY Cryo-Mechanical Robot

Discover how to build a robot for extracting RAM contents from embedded devices using cryogenic techniques. Learn about design challenges, practical solutions, and cost-effective construction methods.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Unveiling Secrets in Binaries

Efficient heuristics for detecting cryptographic algorithms, state machines, and obfuscated code in binaries. Enhance reverse engineering workflows with architecture-agnostic techniques.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Adventures of My Oven

Reverse engineering Samsung oven firmware to fix temperature inaccuracies and improve performance, demonstrating power analysis, fault injection, and binary patching techniques for e-waste reduction.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Cracking the Final Frontier - Comprehensive Security Analysis of Low-Earth Satellites

Comprehensive security analysis of low-earth satellites, exploring vulnerabilities and demonstrating live exploitation to gain full control. Covers satellite architecture, reverse engineering, and potential impacts on critical services.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Backdoor Lockpick

Reverse engineering and exploiting cryptographic backdoors in Phicomm routers, demonstrating vulnerabilities and developing tools for unauthenticated root access.

• YouTube
• 1 hour 12 minutes
• On-Demand
• Conference Talk

Hello 1994

Découvrez les nouvelles techniques de dissimulation du malware PlugX utilisant les API Windows via COM, son exploitation de Windows Explorer et sa capacité de propagation par clé USB.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Hunt for Red October

Explore Windows networking internals, reverse engineering techniques, and recent vulnerabilities like CVE-2023-23415 in this insightful talk on uncovering security flaws in the Windows networking stack.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Portrait of the Artist as a Young VX-er - This Painting Is an MBR Bootkit

Exploring MS-DOS malware techniques to create art, blending assembly programming with vintage bootkit analysis. Insights on legacy vulnerabilities and modern applications in firmware and IoT security.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Press Play To Restart - Under the Hood of the Windows Restart Manager

Explore Windows Restart Manager: its architecture, legitimate uses, and potential for malicious exploitation. Learn defense techniques against threats and see live demonstrations of its functionalities.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Enabling Security Research on Qualcomm Wifi Chips

Explore modifying Qualcomm WiFi chip firmware for security research. Learn about chip architecture, firmware structure, and patching techniques using the Nexmon framework to enhance functionality and find vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Harnessing Intel Processor Trace on Windows for Fuzz

Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk