Attacking modern software protection with Dynamic Binary Instrumentation

Holger Unterbrink

REcon 2025 · Day 1 · Main Track

Modern software protections—anti-debugging routines, anti-tamper checks, VM detection, code obfuscation, and self-modifying code—were once the exclusive domain of sophisticated malware. Today they are

AI review

A competent DynamoRIO tutorial with real utility for malware analysts, but it's a well-trodden technique dressed up as a conference talk rather than novel research.

Watch on YouTube