Recon Conference Courses

Reverse Engineering Windows Defender's JavaScript Engine

Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

DIY ARM Debugger for Wi-Fi Chips

Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Brussels 2018 - Starcraft: Emulating a Buffer Overflow for Fun and Profit

Explore reverse engineering techniques used to emulate a buffer overflow in StarCraft, addressing challenges in preserving popular mods while enhancing game security.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Free Video

Robin Hood vs Cisco ASA AnyConnect

Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Hacking Toshiba Laptops

Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Neurosurgery for Industrial Routers - Security of Sarian OS

Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Dissecting QNX

Comprehensive analysis of QNX's security features, including exploit mitigations and random number generators, revealing vulnerabilities and design issues in critical embedded systems.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Decompiler Internals - Microcode

Explore the intermediate language used in Hex-Rays Decompiler, its simplicity and power in representing programs, and plans for publication and programmatic access.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

When Virtual Hell Freezes Over - Reversing C++ Code

Automated techniques for reversing complex C++ code, focusing on rebuilding inheritance, identifying templates, and tracing program flow to simplify the reverse engineering process.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Toolset for detecting vulnerabilities in iOS apps: download and decrypt, decompile, statically analyze, and present results. Focuses on high-level semantics reconstruction and common mobile app security flaws.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Breaking Code Read Protection on the NXP LPC-Family Microcontrollers

Explore bypassing Code Read Protection in NXP LPC microcontrollers through bootloader exploitation and glitch attacks. Learn hardware/software design for a simple glitcher to disable CRP and access FLASH contents.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware

Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk