Recon Conference Courses

Recon 2017 Brussels - r2m2 by Guillaume "guedou" Valadon

Presentation on r2m2, a radare2 plugin leveraging miasm2 for reversing rare CPU architectures. Demonstrates integration of powerful reverse engineering tools and simplifies implementation of new architectures.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

A Little Less Conversation, A Little More ActionScript

Techniques for in-depth reverse engineering of Flash, mapping ActionScript to undocumented counterparts, and analyzing vulnerabilities in Adobe Flash Player for improved exploit research.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

GRAP - Define and Match Graph Patterns Within Binaries

Herramienta para detectar patrones en código binario mediante coincidencia de grafos. Permite definir firmas personalizadas para identificar variantes de malware y extraer información valiosa.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Transforming Open Source to Open Access in Closed Applications

Exploring security risks of integrating open-source components in closed applications, focusing on Adobe Reader's XSLT engine. Techniques for auditing and finding vulnerabilities are demonstrated.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hacking the Most Popular Cryptocurrency Hardware Wallets

Explore vulnerabilities in popular cryptocurrency hardware wallets with experts Thomas Roth and Dmitry Nedospasov, uncovering potential security risks and attack vectors.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Using WPP and TraceLogging Tracing to Facilitate Dynamic and Static Windows

Explore advanced Windows tracing techniques using WPP and TraceLogging for enhanced dynamic and static analysis in cybersecurity investigations.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

X Ray Reverse Engineering

Explore advanced X-ray reverse engineering techniques with expert George Tarnovsky, uncovering hidden hardware secrets and enhancing your security analysis skills.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Burned in AshesBaseband Fairy Tale Stories

Exploring remote protocols in Baseband, reverse engineering methodologies, and bug discovery in mobile communication systems.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Snow Crashing Virtual Reality - 2019 Edition

Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Mining Disputed Territories - Studying Attacker Signatures

Explore attacker dynamics and signatures in cyber conflicts, leveraging insights for proactive defense and enhanced situational awareness in the cybersecurity landscape.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The Unseen Dangers of Bloatware

Explore critical vulnerabilities in pre-installed software on Dell and Lenovo PCs, examining the security risks posed by bloatware and the balance between convenience and user safety.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

The Road to Qualcomm Trust Zone Apps Fuzzing

Explore Trusted Execution Environment vulnerabilities in Qualcomm's TEE, reverse engineering techniques, and fuzzing methods for TrustZone apps in mobile device security research.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection

Electromagnetic fault injection attack on Trezor Bitcoin wallet reveals recovery seed without physical tampering. Explores vulnerability, demonstrates attack method, and discusses countermeasures for hardware wallets.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Unveiling the Underground World of Anti-Cheats

Explore the ongoing battle between cheat developers and anti-cheat technologies in gaming. Learn about bypassing techniques and tools for testing anti-cheat software effectiveness.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The Last Generic Win32K KASLR Defeat in Windows

Detailed exploration of Windows kernel security, focusing on KASLR defeats, heap vulnerabilities, and recent changes in RS4. Insights into potential exploits and current Windows KASLR state.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk