Emulation-Driven Reverse Engineering for Finding Vulnerabilities
Security researcher atlas demonstrates partial CPU emulation with Unicorn Engine, bypassing tedious static assembly analysis to rapidly discover vulnerabilities.
Summary
The Cognitive Overload of Manual Reverse Engineering
Dissecting thousands of lines of complex disassembled assembly or decompiled C code is mentally exhausting and prone to human oversight.
Introducing Partial Emulation with Unicorn Engine
Atlas demonstrates setting up lightweight CPU emulation harnesses to execute isolated binary functions without needing a full system environment.
Automating State Inspection and Taint Tracking
The speaker shows how partial emulation allows dynamic memory tracing, register state inspection, and automated input mutation directly inside target routines.
Accelerating Vulnerability Discovery Workflows
The presentation provides open-source Python scripts and practical examples of discovering buffer overflows and logic bugs in proprietary binaries.
Related talks
War Stories·43 min
Joe Grand · Bruno Krauss
Reverse engineers vintage RoboForm password generator routines to exploit weak PRNG randomness and recover millions in locked Bitcoin wallets.
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
Main Stage·43 min
Bramwell Brizendine · Austin Kersten · Max Hince
Dr. Bramwell Brizendine introduces SHAREM, an advanced shellcode emulation framework providing complete code coverage and flawless Ghidra disassembly.