Recon Conference Courses

Press Play To Restart - Under the Hood of the Windows Restart Manager

Explore Windows Restart Manager: its architecture, legitimate uses, and potential for malicious exploitation. Learn defense techniques against threats and see live demonstrations of its functionalities.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Enabling Security Research on Qualcomm Wifi Chips

Explore modifying Qualcomm WiFi chip firmware for security research. Learn about chip architecture, firmware structure, and patching techniques using the Nexmon framework to enhance functionality and find vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Adventures of My Oven

Reverse engineering Samsung oven firmware to fix temperature inaccuracies and improve performance, demonstrating power analysis, fault injection, and binary patching techniques for e-waste reduction.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Cracking the Final Frontier - Comprehensive Security Analysis of Low-Earth Satellites

Comprehensive security analysis of low-earth satellites, exploring vulnerabilities and demonstrating live exploitation to gain full control. Covers satellite architecture, reverse engineering, and potential impacts on critical services.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Backdoor Lockpick

Reverse engineering and exploiting cryptographic backdoors in Phicomm routers, demonstrating vulnerabilities and developing tools for unauthenticated root access.

• YouTube
• 1 hour 12 minutes
• On-Demand
• Conference Talk

Hello 1994

Découvrez les nouvelles techniques de dissimulation du malware PlugX utilisant les API Windows via COM, son exploitation de Windows Explorer et sa capacité de propagation par clé USB.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Hunt for Red October

Explore Windows networking internals, reverse engineering techniques, and recent vulnerabilities like CVE-2023-23415 in this insightful talk on uncovering security flaws in the Windows networking stack.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Portrait of the Artist as a Young VX-er - This Painting Is an MBR Bootkit

Exploring MS-DOS malware techniques to create art, blending assembly programming with vintage bootkit analysis. Insights on legacy vulnerabilities and modern applications in firmware and IoT security.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Reversing IoT - Xiaomi Ecosystem

Explore Xiaomi IoT ecosystem security, firmware extraction, and cloud communication. Learn to modify devices, implement new functions, and gain independence from proprietary cloud services.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Harnessing Intel Processor Trace on Windows for Fuzz

Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Reverse Engineering Windows Defender's JavaScript Engine

Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

DIY ARM Debugger for Wi-Fi Chips

Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Visiting The Snake Nest

In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk