Recon Conference Courses

Architecture Analysis of VMProtect 3.8 - Demystifying the Complexity

Delve into VMProtect 3.8's architecture, reverse engineering techniques, and attack vectors for protected binaries. Learn to identify configuration errors and develop custom analysis tools for combating this obfuscation technology.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Breaking the DA1469x BootROM - Vulnerability Analysis and Exploitation

Dive into the process of analyzing and exploiting BootROM vulnerabilities in Renesas DA1469x chips, learning how to bypass SecureBoot and recover encrypted firmware through reverse engineering techniques.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Smoke and Mirrors: Windows Driver Signatures Are Optional

Uncover a Windows vulnerability class that allows bypassing Driver Signing Enforcement (DSE) in Windows 11, enabling arbitrary code execution with kernel privileges without third-party code.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Cryptography Is Hard: Breaking The DoNex Ransomware

Dive into the technical details of DoNex ransomware and learn how vulnerabilities were exploited to decrypt affected files without negotiating with cybercriminals.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

The Future of Reverse Engineering with LLMs

Explore the current and future applications of Large Language Models in reverse engineering, addressing challenges like inaccuracies and privacy while showcasing ReverserAI's potential to enhance code analysis and malware detection.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Peeling Back the Windows Registry Layers: A Bug Hunter's Expedition

Dive into the complex world of Windows Registry with Mateusz Jurczyk as he reveals vulnerabilities discovered during his audit of the kernel subsystem, featuring case studies and exploit demonstrations.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

JTAG Debug of Windows Hyper-V Secure Kernel with WinDbg and DCI/EXDI

Explore JTAG debugging of Windows Hyper-V and Secure Kernel using WinDbg with EXDI, SourcePoint debugger, and Intel DCI technology, featuring run-control, VMM breakpoints, and Intel Processor Trace capabilities.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Binary Golfing UEFI Applications - Recon 2024

Dive into the world of UEFI binary golfing, exploring how to create tiny self-replicating applications, understand the x64 ABI, and implement obfuscation techniques to avoid detection.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Tales From The Crypt: Bug Hunting in the Windows CryptoAPI

Dive into vulnerability research in Windows CryptoAPI with Erik Egsgard as he shares his journey finding remote code execution vulnerabilities in this critical security component.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Breaking Z-Waves: How We Use Symbolic Execution to Find Critical RF Vulnerabilities

Dive into the world of IoT RF protocol security as Oliver Lavery explores symbolic execution tools for vulnerability research, showcasing critical discoveries in SiLabs Z-Wave protocol implementation.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Hypervisor-enforced Paging Translation - The End of Non Data-driven Kernel Exploits?

Dive into the latest Windows kernel exploit mitigations with a focus on Hypervisor-enforced Paging Translation (HVPT), exploring how this technology aims to protect page tables and potentially end non-data-driven kernel exploits.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Path of Rev.ng: From Raw Bytes to CodeQL on Decompiled Code

Explore the rev.ng decompiler's capabilities in this hands-on guide from raw binary to decompiled C code, including using LLVM IR, CodeQL, and clang-static-analyzer to find bugs in decompiled code.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Manipulating Malware: Forcing Android Malware to Self-Unpack

Discover an automated method to force Android malware to unpack itself, eliminating the need for custom decryptors while remaining packer-agnostic. Learn about BadUnboxing, a new open-source tool for generating benign versions of Android malware.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Seeing Through Themida's Code Mutation

Dive into x86-64 machine code obfuscation through an analysis of Themida's code mutation feature. Learn about the implementation, findings, and a symbolic execution-based attack for complete deobfuscation and binary regeneration.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Control Flow Integrity on IBM i - Memory Safety and Security Architecture

Explore how IBM i implements control flow integrity through hardware-assisted memory tagging, with insights into its object-oriented OS, memory safety mechanisms, and a demonstration of memory corruption exploitation.

• YouTube
• 45 minutes
• Self-Paced
• Free Video