Arnau Gàmez i Montolio

Hey there, I'm Arnau! 👋

Catalan hacker, security researcher and mathematician with a strong bias towards software security and reverse engineering.

Specialized in software protection research and development (obfuscation, cryptography, mixed boolean-arithmetic algebra, binary polynomials, etc.) from a dual attack-and-defense perspective both in academia and industry. Experienced malware analyst in the antivirus sector and security engineer in the gaming industry.

Founder of Fura Labs, a boutique security firm and consultancy focused on software protection research and education. Speaker and trainer at several international security conferences.

Upcoming trainings

[+] Public offerings

:: Get notified ::

[+] Private training

Occupation

• Senior Expert Security Engineer @ Activision
• PhD @ City, University of London
• Founder, Researcher & Trainer @ Fura Labs

Academic publications

• Efficient Normalized Reduction and Generation of Equivalent Multivariate Binary Polynomials
  Workshop on Binary Analysis Research (BAR 2024)
  Arnau Gàmez-Montolio, Enric Florit, Martin Brain, Jacob M. Howe
  pdf recording
• Analysis and applications of orthogonal approaches to simplify Mixed Boolean-Arithmetic expressions
  M.Sc. Thesis (2022)
  Arnau Gàmez i Montolio
  pdf code
• Code deobfuscation by program synthesis-aided simplification of Mixed Boolean-Arithmetic expressions
  B.Sc. Thesis (2020)
  Arnau Gàmez i Montolio
  pdf code

Talks (selection)

• Hands-on binary (de)obfuscation (updated '24)
  06/2024 | EuskalHack (Donosti)
  materials
• Symbolic execution for security researchers
  10/2023 | Navaja Negra (Albacete)
  materials
• Tales of software protection: cryptography and obfuscation, better together
  03/2023 | RootedCON (Madrid)
  materials
• A practical approach to advanced code obfuscation with MBA expressions
  08/2022 | HITB (Singapore)
  materials
• Hands-on binary (de)obfuscation
  06/2022 | RingZer0 (Remote)
  materials
• Code obfuscation through Mixed Boolean-Arithmetic expressions
  11/2021 | Intent Summit (Remote)
  materials
• A review of modern code deobfuscation techniques
  07/2020 | HITB Lockdown 002 (Remote)
  materials
• Code emulation for reverse engineers
  05/2020 | RuhrSec (Remote)
  materials
• Overcoming fear: reversing with radare2
  05/2019 | HITB (Amsterdam)
  materials

:: All talks and materials ::

Past trainings

• Advanced Software Protection - Attacks and Defense
  02/2024 | Ringzer0 BOOTSTRAP24 (Austin, TX)
• An Analytical Approach to Modern Binary Deobfuscation
  08/2023 | Ringzer0 ZER0GRAVITY (Las Vegas, NV)
  03/2023 | Private
  02/2023 | Ringzer0 RETURN23XPLOIT (Remote)
  12/2022 | Private
  10/2022 | Private
  08/2022 | HITB (Singapore)
  08/2022 | Ringzer0 BACK2VEGAS (Las Vegas, NV)
  02/2022 | Ringzer0 CATCH2022 (Remote)