Recon Conference Courses

Subverting Your Server Through Its BMC - The HPE iLO4 Case

A deep-dive security study of HP iLO4 covers firmware, GreenHills OS internals, exposed attack surfaces, and DMA-based host compromise.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Visiting The Snake Nest

An in-depth look at Turla’s custom malware tools for breaching, spying on, and maintaining persistence in government and diplomatic targets.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Recon Brussels 2018 - Starcraft: Emulating a Buffer Overflow for Fun and Profit

A technical talk on emulating StarCraft's map-parser buffer overflow and using reverse engineering, tracers, instrumentation, and emulator design to preserve its mods.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

Robin Hood vs Cisco ASA AnyConnect

A technical analysis of fuzzing Cisco ASA AnyConnect, tracing a double-free vulnerability, and exploiting it with fragmented IKEv1 packets.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Hacking Toshiba Laptops

A reverse-engineering case study of Toshiba laptop BIOS password recovery, EC firmware signing keys, and planting a persistent rootkit.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Neurosurgery for Industrial Routers - Security of Sarian OS

Reverse-engineering the Sarian OS to expose vulnerabilities in a Digi WR21 industrial router.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Dissecting QNX

Reverse-engineers QNX’s exploit mitigations, random number generators, and memory-management internals, uncovering design flaws and hardening measures.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

A technical case study of exploiting a WSL vulnerability to corrupt Windows kernel memory and achieve arbitrary code execution.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Decompiler Internals - Microcode

An inside look at Hex-Rays Decompiler’s microcode, the intermediate language used to represent real-world programs and enable programmatic analysis.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Conference Talk

When Virtual Hell Freezes Over - Reversing C++ Code

Learn to automate reverse engineering of C++ programs by rebuilding classes, vtables, and virtual calls with smart tracing and IDAPython.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Analyzing binary iOS applications through decryption, decompilation, static analysis, and human-readable vulnerability reporting.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Breaking Code Read Protection on the NXP LPC-Family Microcontrollers

A beginner-level glitch attack bypasses code read protection on NXP LPC microcontrollers to enable flash readout.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware

Explores reverse engineering and vulnerability research on an HSM’s TMS320C64x firmware, including extending Capstone to disassemble the architecture and finding a firmware bug.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Recon 2017 Brussels - r2m2 by Guillaume "guedou" Valadon

Explore r2m2, a radare2 plugin using miasm2 to assemble, disassemble, split blocks, and support reverse engineering across CPU architectures.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

GRAP - Define and Match Graph Patterns Within Binaries

Define and match graph patterns in binary control-flow graphs to detect malware variants and extract matched instructions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk