{"product_id":"agentic-re-automating-reverse-engineering-vulnerability-research-with-ai-john-mcintosh-sg2027","title":"Agentic RE: Automating Reverse Engineering \u0026 Vulnerability Research with AI - John McIntosh - DCTSG2027","description":"\u003cp\u003e\u003cstrong\u003eName of Training:\u003c\/strong\u003e Agentic RE: Automating Reverse Engineering \u0026amp; Vulnerability Research with AI\u003cbr\u003e\u003cstrong\u003eTrainer(s):\u003c\/strong\u003e John McIntosh\u003cbr\u003e\u003cstrong\u003eSkill Level:\u003c\/strong\u003e Advanced\u003cbr\u003e\u003cstrong\u003eDates:\u003c\/strong\u003e March 5 - March 6, 2027\u003cbr\u003e\u003cstrong\u003eTime:\u003c\/strong\u003e 9:00 am - 5:00 pm\u003cbr\u003e\u003cstrong\u003eVenue:\u003c\/strong\u003e TBD\u003cbr\u003e\u003cstrong\u003eEarly Bird Cost:\u003c\/strong\u003e S$4,900 (incl. GST, until Dec 31, 2026)\u003cbr\u003e\u003cstrong\u003eRegular Cost:\u003c\/strong\u003e S$5,200 (incl. GST)\u003c\/p\u003e\n\u003ch3\u003eShort Summary\u003c\/h3\u003e\n\u003cp\u003eReverse engineering is entering the Agentic Era. In this two-day, hands-on progression you will pair traditional RE skills with private LLM stacks, custom Model Context Protocol servers, and coding agents extended with your own Agent Skills, and leave with AI-powered workflows that accelerate understanding, surface weaknesses, and streamline your analysis.\u003c\/p\u003e\n\u003ch3\u003eCourse Description\u003c\/h3\u003e\n\u003cp\u003eReverse engineering is evolving beyond static tools and manual workflows. This two-day, hands-on course introduces a new paradigm: Agentic Workflows. By combining large language models (LLMs), the Model Context Protocol (MCP), and reverse engineering tools like Ghidra, participants learn how to design, configure, and orchestrate AI-powered systems that automate and accelerate binary analysis. Along the way, you turn a coding agent into a reversing agent and capture your RE methodology as reusable Agent Skills.\u003c\/p\u003e\n\u003cp\u003eRather than focusing on a single operating system, the course demonstrates how agentic pipelines can be applied across Windows, Apple, and Android. You use local models to find real bugs in real targets, including a macOS credential stealer and Windows kernel CVEs from Patch Tuesday, so you learn both how each bug works and how bugs like it are found. Students see how MCP servers and AI-assisted workflows adapt to different platforms, enabling reproducible analysis and vulnerability triage in diverse environments. By the end of the course, participants will have built a reproducible agentic AI workflow capable of analyzing software, surfacing potential vulnerabilities, validating, and triaging results across multiple platforms.\u003c\/p\u003e\n\u003cp\u003eIf you are a reverse engineering analyst aiming to speed up your understanding, an AI developer curious about applying agentic workflows to real security problems, or a vulnerability researcher exploring how AI can uncover new weaknesses, this course is built for you.\u003c\/p\u003e\n\u003ch3\u003eCourse Outline\u003c\/h3\u003e\n\u003ch4\u003eDay 1 - Morning: Foundations and Stack Setup\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eThe Agentic Era: how LLMs transform reverse engineering and vulnerability research\u003c\/li\u003e\n\u003cli\u003eLLM basics: tokens, embeddings, quantization, and why models hallucinate CVEs\u003c\/li\u003e\n\u003cli\u003eModel selection and hardware trade-offs: from Qwen 3.8 27B up to GLM Flash 5.3, DeepSeek 4.1, and the latest local models\u003c\/li\u003e\n\u003cli\u003eModel Context Protocol (MCP): exposing RE tools to LLMs\u003c\/li\u003e\n\u003cli\u003eWhy local LLMs matter: privacy, reproducibility, control\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch4\u003eDay 1 - Afternoon: Foundations and Stack Setup\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eLocal LLM stack setup: Ollama, OpenWebUI, LM Studio, GhidraMCP, and pyghidra-mcp\u003c\/li\u003e\n\u003cli\u003eAgentic-assisted reverse engineering: the LLM explains and annotates code\u003c\/li\u003e\n\u003cli\u003eReal Patch Tuesday CVEs: patch diff a Windows CVE to find the root cause and learn how bugs like it are found\u003c\/li\u003e\n\u003cli\u003eUsing AI to dive into new research areas\u003c\/li\u003e\n\u003cli\u003eHands-on lab time and troubleshooting on student stacks\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch4\u003eDay 2 - Morning: MCP Development and Agentic Workflow Orchestration\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eMCP server basics: Python and FastMCP\u003c\/li\u003e\n\u003cli\u003eCustom Ghidra MCP with pyghidra-mcp: headless scripting, function listings\u003c\/li\u003e\n\u003cli\u003eSAST meets LLMs: Semgrep on decompiled code, then LLM triage to find a real kernel integer overflow among the noise\u003c\/li\u003e\n\u003cli\u003eLessons from DARPA AIxCC contest winners and insights from agentic bug-finding systems\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch4\u003eDay 2 - Afternoon: Coding Agents, Skills, and Orchestration\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eProgramming with LLMs: DSPy signatures, modules, and ReAct agents that call your Ghidra tools\u003c\/li\u003e\n\u003cli\u003eCoding agents as reversing agents: let an agent drive the full analysis loop\u003c\/li\u003e\n\u003cli\u003eDeveloping Agent Skills: encode your RE methodology as reusable, testable skills\u003c\/li\u003e\n\u003cli\u003eSecuring agentic workflows: prompt injection, sanitization\u003c\/li\u003e\n\u003cli\u003eRE HUD prototype using Streamlit or Chainlit\u003c\/li\u003e\n\u003cli\u003eCapstone and proficiency evaluation: students combine deterministic RE tools with agentic reasoning to build reliable, integrated workflows for LLM-enhanced binary analysis, then complete the course CTF and one capstone path\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eDifficulty Level\u003c\/h3\u003e\n\u003cp\u003eAdvanced - The student is expected to have significant practical experience with the tools and technologies that the training will focus on.\u003c\/p\u003e\n\u003ch3\u003eSuggested Prerequisites\u003c\/h3\u003e\n\u003cp\u003eStudents should be comfortable with common reverse engineering tools, have a basic understanding of modern AI concepts, and be able to write or modify Python scripts. You do not need deep expertise, but familiarity will help you get the most out of the hands-on work.\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eReverse engineering experience (familiarity with Ghidra, IDA, or similar tools)\u003c\/li\u003e\n\u003cli\u003eBasic vulnerability research knowledge (common bug classes, analysis workflows)\u003c\/li\u003e\n\u003cli\u003eComfort with Python scripting and basic development (installing, debugging, running scripts)\u003c\/li\u003e\n\u003cli\u003eExperience using recent LLM capabilities in workflows, or at least leveraging AI to improve day-to-day tasks\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eNo pre-work is required. Setup instructions for both the local and the instructor-hosted options are provided before the course, so students arrive with a working environment, and time is reserved on Day 1 for anyone who needs help.\u003c\/p\u003e\n\u003ch2\u003eWhat Students Should Bring\u003c\/h2\u003e\n\u003cp\u003eSystem requirements and alternatives:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eA laptop with 16GB or more of RAM, capable of running Docker and a Linux-style command line\u003c\/li\u003e\n\u003cli\u003eA GPU is not required. LLM inference is provided by the instructor during the course. Students who want to experiment with local models on their own hardware, for example Qwen 3.8 27B via Ollama, can do so, but this is optional\u003c\/li\u003e\n\u003cli\u003eSetup instructions for both the local and the instructor-hosted options will be provided before the course\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eSoftware requirements:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePython 3.11 or later\u003c\/li\u003e\n\u003cli\u003eDocker, to run OpenWebUI and Ollama (non-Docker installation also supported)\u003c\/li\u003e\n\u003cli\u003egit and a Linux-style command line\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eWhat the Trainer Will Provide\u003c\/h2\u003e\n\u003cp\u003eCourse materials: slides, Jupyter notebooks, annotated scripts, and documentation. Hands-on labs in a preconfigured container with Ghidra, pyghidra-mcp, and every course tool installed, using real-world samples: malware, CVE binaries, and patch diffs. Instructor-hosted LLM inference for the duration of the course, so no student needs a GPU or a paid API account. Optional instructions for connecting the same workflows to frontier model APIs, for students who want to use them. Access to the course CTF server during the class and afterward. No equipment loan or purchase add-on is offered.\u003c\/p\u003e\n\u003ch2\u003eTrainer(s) Bio\u003c\/h2\u003e\n\u003cp\u003eJohn McIntosh (@clearbluejar) is a security researcher and lead instructor at ClearSecLabs, a company that offers hands-on training and consulting for reverse engineering and offensive security. He is the author of pyghidra-mcp, a Python-based Ghidra MCP server designed for agentic workflows and reproducible automation, and of ghidriff, a binary patch-diffing engine. Both appear in published frontier-lab n-day exploit research and in independent agentic patch-diffing pipelines. He presented the patch diffing agentic workflow at Objective by the Sea v8 (Reverse Engineering Apple Security Updates).\u003c\/p\u003e\n\u003cp\u003eJohn has taught related workshops at major conferences, including Supercharging Ghidra: Build Your Own Private Local LLM RE Stack with GhidraMCP, Ollama, and OpenWebUI (Ringzer0 Training), and Offensive Security Tool Development with Ghidra: From Custom CLI Tools to an MCP Server (REcon 2025). With over a decade of offensive security experience, he has spoken and taught at DEF CON Training, Black Hat, Ringzer0, 44CON, Objective by the Sea, and REcon. He regularly blogs on clearbluejar.github.io, publishing detailed write-ups on reversing CVEs and building RE tooling with Ghidra. His teaching emphasizes reproducibility, transparency, and contributor empowerment, bridging deterministic analysis with AI-driven reasoning to accelerate vulnerability research.\u003c\/p\u003e\n\u003ch2\u003eProficiency Exam\u003c\/h2\u003e\n\u003cp\u003eStudents are evaluated through a two-part hands-on assessment delivered during the course. The first part is a CTF that exercises the full agentic toolchain taught in class, from local LLM stack configuration to MCP-driven binary triage. The second part is an end-to-end agentic workflow capstone, where students choose one of two paths: a Reverse Engineering (RE) path focused on understanding and annotating an unfamiliar binary, or a Vulnerability Research (VR) path focused on surfacing and validating a vulnerability in a target binary. To demonstrate proficiency, students must accumulate a substantial number of points on the course CTF and successfully complete at least one of the two capstone paths (RE or VR). Progress on both is visible to the instructor throughout, so students who fall behind are identified and supported during the course rather than at the end of it.\u003c\/p\u003e\n\u003chr\u003e\n\u003csection class=\"registration-terms\"\u003e\n\u003ch3\u003eRegistration Terms and Conditions\u003c\/h3\u003e\n\u003cp\u003eTrainings are refundable before January 29, 2027, minus a non-refundable processing fee of $350.\u003c\/p\u003e\n\u003cp\u003eBetween January 30, 2027 and February 28, 2027 partial refunds will be granted, equal to 50% of the course fee minus a processing fee of $350.\u003c\/p\u003e\n\u003cp\u003eAll trainings are non-refundable after Feb 28, 2027.\u003c\/p\u003e\n\u003cp\u003eTraining tickets may be transferred to another student. Please email us at training@defcon.org for specifics.\u003c\/p\u003e\n\u003cp\u003eIf a training does not reach the minimum registration requirement, it may be cancelled. In the event the training you choose is cancelled, you will be provided the option of receiving a full refund or transferring to another training (subject to availability).\u003c\/p\u003e\n\u003cp\u003eFailure to attend the training without prior written notification will be considered a no-show. No refund will be given.\u003c\/p\u003e\n\u003cp\u003eDEF CON Training may share student contact information, including names and emails, with the course instructor(s) to facilitate sharing of pre-work and course instructions. Instructors are required to safeguard this information and provide appropriate protection so that it is kept private. Instructors may not use student information outside the delivery of this course without the permission of the student.\u003c\/p\u003e\n\u003cp\u003eBy purchasing this ticket you agree to abide by the \u003ca href=\"https:\/\/defcon.org\/html\/links\/dc-code-of-conduct.html\"\u003eDEF CON Training Code of Conduct\u003c\/a\u003e and the registration terms and conditions listed above.\u003c\/p\u003e\n\u003cp\u003eSeveral breaks will be included throughout the day. Please note that food is not included.\u003c\/p\u003e\n\u003cp\u003eAll courses come with a certificate, contingent on attendance at 75% of course sessions. Students who pass the end-of-course evaluation will be issued a certificate of proficiency. All other students with sufficient course attendance will be issued a certificate of completion. Students are responsible for making sure their attendance is recorded at the start of the day and after returning from lunch.\u003c\/p\u003e\n\u003c\/section\u003e","brand":"Singapore 2027","offers":[{"title":"Default Title","offer_id":63495455342732,"sku":null,"price":4900.0,"currency_code":"SGD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0750\/9042\/8044\/files\/building-agentic-re_mcintosh_44c5284e-a0df-40cb-ada3-9899dcda0399.png?v=1793116167","url":"https:\/\/sg.shop.defcon.org\/products\/agentic-re-automating-reverse-engineering-vulnerability-research-with-ai-john-mcintosh-sg2027","provider":"DEF CON SG","version":"1.0","type":"link"}