Recon Conference Courses

Reversing IoT - Xiaomi Ecosystem

Explore Xiaomi IoT ecosystem security, firmware extraction, and cloud communication. Learn to modify devices, implement new functions, and gain independence from proprietary cloud services.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Press Play To Restart - Under the Hood of the Windows Restart Manager

Explore Windows Restart Manager: its architecture, legitimate uses, and potential for malicious exploitation. Learn defense techniques against threats and see live demonstrations of its functionalities.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Enabling Security Research on Qualcomm Wifi Chips

Explore modifying Qualcomm WiFi chip firmware for security research. Learn about chip architecture, firmware structure, and patching techniques using the Nexmon framework to enhance functionality and find vulnerabilities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Harnessing Intel Processor Trace on Windows for Fuzz

Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Reverse Engineering Windows Defender's JavaScript Engine

Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

DIY ARM Debugger for Wi-Fi Chips

Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Recon Brussels 2018 - Starcraft: Emulating a Buffer Overflow for Fun and Profit

Explore reverse engineering techniques used to emulate a buffer overflow in StarCraft, addressing challenges in preserving popular mods while enhancing game security.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

Robin Hood vs Cisco ASA AnyConnect

Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Hacking Toshiba Laptops

Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Neurosurgery for Industrial Routers - Security of Sarian OS

Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Dissecting QNX

Comprehensive analysis of QNX's security features, including exploit mitigations and random number generators, revealing vulnerabilities and design issues in critical embedded systems.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk