BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.recon.cx//recon-2026//talk//3WVX3F
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-recon-2026-3WVX3F@cfp.recon.cx
DTSTART;TZID=EST:20260621T160000
DTEND;TZID=EST:20260621T163000
DESCRIPTION:Reverse engineering is fun and profitable\, but can become tedi
 ous when the code is obfuscated\, especially if done by hand. Under strong
  obfuscation\, even automated analyses based on taint or symbolic reasonin
 g fail\, becoming quickly too imprecise. Fortunately\, a new hope arises w
 ith black-box deobfuscation. This is an emerging paradigm for automated de
 obfuscation that leverages program synthesis to simplify local\, highly ob
 fuscated code snippets. Black-box deobfuscation is especially promising be
 cause it is not affected by the syntactic complexity introduced by obfusca
 tion. Hence\, it scales to strong obfuscation\, where taint or symbolic re
 asoning would typically fail. The Xyntia framework is the state-of-the-art
  of black-box deobfuscation. It is backed by recent publications in intern
 ational academic conferences (ACM CCS 2021 & 2025). This presentation will
  provide an overview of its internals and describe practical examples of s
 uccessful deobfuscation with Xyntia. In particular\, we will show how Xynt
 ia can be used to deobfuscate virtual machine handlers or MBA expressions 
 found in real code (e.g.\, Snapchat).
DTSTAMP:20260612T175937Z
LOCATION:Grand Salon Opera
SUMMARY:Black-box deobfuscation: reverse engineering binaries with your eye
 s closed (or almost) - Grégoire Menguy
URL:https://cfp.recon.cx/recon-2026/talk/3WVX3F/
END:VEVENT
END:VCALENDAR