REcon Conference Talks & Presentations

Recon Conference

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Recon Conference

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Conference

Robin Hood vs Cisco ASA AnyConnect

Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Recon Conference

Hacking Toshiba Laptops

Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Recon Conference

Neurosurgery for Industrial Routers - Security of Sarian OS

Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Recon Conference

Dissecting QNX

Comprehensive analysis of QNX's security features, including exploit mitigations and random number generators, revealing vulnerabilities and design issues in critical embedded systems.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Recon Conference

Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL

Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Recon Conference

Decompiler Internals - Microcode

Explore the intermediate language used in Hex-Rays Decompiler, its simplicity and power in representing programs, and plans for publication and programmatic access.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

Recon Conference

When Virtual Hell Freezes Over - Reversing C++ Code

Automated techniques for reversing complex C++ code, focusing on rebuilding inheritance, identifying templates, and tracing program flow to simplify the reverse engineering process.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Recon Conference

Analyzing iOS Apps - Road from AppStore to Security Analysis Report

Toolset for detecting vulnerabilities in iOS apps: download and decrypt, decompile, statically analyze, and present results. Focuses on high-level semantics reconstruction and common mobile app security flaws.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Recon Conference

Breaking Code Read Protection on the NXP LPC-Family Microcontrollers

Explore bypassing Code Read Protection in NXP LPC microcontrollers through bootloader exploitation and glitch attacks. Learn hardware/software design for a simple glitcher to disable CRP and access FLASH contents.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Recon Conference

Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware

Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Recon Conference

Recon 2017 Brussels - r2m2 by Guillaume "guedou" Valadon

Presentation on r2m2, a radare2 plugin leveraging miasm2 for reversing rare CPU architectures. Demonstrates integration of powerful reverse engineering tools and simplifies implementation of new architectures.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Recon Conference

A Little Less Conversation, A Little More ActionScript

Techniques for in-depth reverse engineering of Flash, mapping ActionScript to undocumented counterparts, and analyzing vulnerabilities in Adobe Flash Player for improved exploit research.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Recon Conference

GRAP - Define and Match Graph Patterns Within Binaries

Herramienta para detectar patrones en código binario mediante coincidencia de grafos. Permite definir firmas personalizadas para identificar variantes de malware y extraer información valiosa.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk