Redefining Security

About Stobaugh Group

Stobaugh Group is a Cyber Security Research and Consultation company, specializing in Vulnerability Assessment & Penetration Testing (VAPT) and Vulnerability Research.

More specifically, our current skill sets are as follows:


Android & Mobile Security: We possess unparalleled expertise in the Android ecosystem, unearthing critical vulnerabilities and crafting robust defensive strategies.

Open-Source Intelligence (OSINT/OSI): We wield the power of OSINT to gather vital intelligence, anticipate evolving threats, and stay ahead of the curve.


Vulnerability Assessment & Penetration Testing (VAPT): We don the black hat, simulating real-world attacks to expose weaknesses and harden your defenses from the inside out. We offer both On-site, and physical testing as well as Android Devices and apps, Web apps and APIs, Automotive technology, IoT Devices, and more.


Reverse Engineering: We delve into the intricate workings of software, demystifying its secrets and uncovering potential security backdoors.


Social Engineering/PsyOps: We understand the human element of security, empowering organizations and individuals to build an impenetrable wall against manipulation and deception.


Cyber Security Research: We consistently remain engaged in some form of research as much as realistically possible. Our goal is to be working on something, all the time, so we are learning something, all the time.


Physical Security Hardening: We are exceptionally skilled at finding ways to breach physical security, let us help you ensure your infrastructure is secure.





Our Collective Discoveries

October 2022- AOSP PM (Package Manager) flaw - Public Disclosure in Jan 2023 - 2 Work-around follow-up exploits made for OEM patches. Fin = Dec 2023


January 2023 - Microsoft Visual Studio Nuget RCE - Public Disclosure in December of 2023

July 2023 - CVE 2023 30731 "Combo-kill" Samsung Security Update - Oct 2023 


August 2023- Google Bard/Gemini API Reverse Engineering - Google Honorable Mentions