Recon Conference Courses

Transforming Open Source to Open Access in Closed Applications

Examines source auditing and source-to-binary matching techniques for finding code-execution vulnerabilities in Adobe Reader’s open-source XSLT engine.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking the Most Popular Cryptocurrency Hardware Wallets

A conference talk on hacking popular cryptocurrency hardware wallets.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Using WPP and TraceLogging Tracing to Facilitate Dynamic and Static Windows

Learn how WPP and TraceLogging tracing expose Windows behavior for dynamic and static analysis.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

X Ray Reverse Engineering

A conference talk on reverse engineering X Ray, presented by George Tarnovsky.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Burned in AshesBaseband Fairy Tale Stories

Explore baseband remote protocols and reverse-engineering methodology through tinkering, bug discovery, and analysis of a previously burned vulnerability.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Snow Crashing Virtual Reality - 2019 Edition

Examines remote code execution vulnerabilities in VR games, their attack surfaces, and the privacy and consent risks of abuse in online communities.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Mining Disputed Territories - Studying Attacker Signatures

Explore how attackers monitor one another and how studying attacker dynamics can reveal operations and strengthen proactive cyber defense.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Unseen Dangers of Bloatware

This talk examines how preinstalled Dell and Lenovo support tools expose Windows users to critical remote-code-execution and local-privilege-escalation risks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

The Road to Qualcomm Trust Zone Apps Fuzzing

Explore how reverse engineering Qualcomm’s TrustZone ecosystem enables automated fuzzing of trusted apps and discovery of mobile security vulnerabilities.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection

An electromagnetic fault-injection attack extracts a Trezor wallet’s recovery seed through its enclosure, with USB triggering and practical countermeasures.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Unveiling the Underground World of Anti-Cheats

Explore anti-cheat bypasses through static and dynamic analysis of XignCode3, EasyAntiCheat, and BattlEye.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Last Generic Win32K KASLR Defeat in Windows

A technical analysis of the final generic Win32K KASLR defeat in Windows, including heap leaks, segment heap weaknesses, pointer disclosure, and potential local privilege escalation.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Attacking Hexagon Security Analysis of Qualcomm's ADSP

A security analysis of Qualcomm's Hexagon ADSP covering reverse engineering, mitigations, and exploitation of a memory-corruption vulnerability.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Reversing and Exploiting Broadcom Bluetooth

Reverse engineer and patch Broadcom Bluetooth firmware with InternalBlue, adding features and investigating discovered vulnerabilities.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Automation Techniques in C++ Reverse Engineering

Automates C++ reverse engineering with DLL injection to locate structure use, infer function argument types, and reveal inheritance and composition.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk