@bugscale

Security Audits & Vulnerability Research

 Switzerland
bugscale.ch/
Joined August 2019
  • Tweets21
  • Following13
  • Followers352
Our second blog post is out here: bugscale.ch/blog/here-we-go-… ! We managed to install arbitrary APKs on the Samsung Galaxy S25 from an app without install permissions. For this, @SachaKozma did most of the work, but it was great looking into Samsung's cloud gaming component with him

Here We Go Again: A Five-Bug Chain to Arbitrary APK Install on Samsung S25

This post breaks down a bug chain we found in Samsung Galaxy Store that leads to arbitrary local APK install on the Samsung S25, using weak signature verification, an unprotected exported receiver,...

bugscale.ch
1
27
1
98
14,422
Bugscale retweeted
Sacha@SachaKozmaMay 1
With @Hacker_Chai we just published our second blog post on Samsung security research! This one is about a local arbitrary APK install in Galaxy Store, combining a few vulns like a broken signature check, a file write, etc. Check it out here: bugscale.ch/blog/here-we-go-…

Here We Go Again: A Five-Bug Chain to Arbitrary APK Install on Samsung S25

This post breaks down a bug chain we found in Samsung Galaxy Store that leads to arbitrary local APK install on the Samsung S25, using weak signature verification, an unprotected exported receiver,...

bugscale.ch
1
3
5
598
Bugscale retweeted
Bugscale@bugscaleMar 20
Our researchers @SachaKozma & @Hacker_Chai are taking the stage at @1ns0mn1h4ck today! 📍 Campus Auditorium B at 13:30 🎯 Shoot for the Galaxies: Our Samsung S25 1-click RCE Journey If you're into mobile attack surface research, this one's not to miss! #INSO2026 #insomnihack
7
19
2,051
Proud to have published the first ever report to qualify for Samsung's Important Scenario Vulnerability Programme (ISVP)! @SachaKozma @bugscale security.samsungmobile.com/s…
4
29
2,023
🐞 Bugscale is thrilled to be sponsoring Hexacon again and we look forward to seeing everyone in Paris! Thank you @bugscale for your continued support 🙏
3
7
2,133
Bugscale retweeted
Volodya@volodiyah1 Jul 2024
Here is a new blog post, where I wrote about (some of) my recent work with angr, including: - Adding support for Windows debug symbols - Collecting and visualizing real-time coverage - Improving debugging workflows plowsec.github.io/angr-intro…

angr for real-world use cases

My experiences using angr for real-world use cases in 2024, and extending it to diagnose problems / show what it’s doing

plowsec.github.io
32
76
8,986
Highlights from #Pwn2Own Toronto Day 2: Team Bugscale vs the #HP printer
3
1
13
Bugscale retweeted
ph0wn@ph0wn7 Dec 2022
Ph0wn is brought free to you thanks to our sponsors. We warmly thank our bronze sponsors :)
5
8
In the first SOHO SMASHUP of the day, we have a unique + a known bug! #Pwn2Own #P2OToronto
3
1
16
🔥 We are thrilled to announce our first sponsor! 🙏 Thank you @bugscale for helping us make this highly technical conference possible 🐞 To find out more about Bugscale: ➡️ bugscale.ch/ hexacon.fr/sponsors/ #HEXACON2022
10
13
[TALK ANNOUNCEMENT] Automatically extracting static anti-virus signatures by Vladimir Meier (@PlowSec) insomnihack.ch/confirmed-spe… #INS22 #INSO22 #Talks
5
10
Team Bugscale continues #Pwn2Own #AfterDark with a successful exploit of the LAN interface of the NETGEAR R6700 router. They combined an auth bypass and a command injection bug to earn $5,000 and 1 Master of Pwn point. #P2OAustin
15
40
Success! The Bugscale team was able to take over a WD My Cloud Pro Series PR4100. They head off to the disclosure 'room' to provide the details of their demonstration. #Pwn2Own #P2OAustin
5
13
Coming up next, the Bugscale team targets the Western Digital My Cloud Pro Series PR4100 in the NAS category. #Pwn2Own #P2OAustin
3
5
Thanks to @bugscale to be Silver sponsor at BlackAlps BBQ 21! blackalps.ch/ba-21/
2
8
Success! The @bugscale team was able to demonstrate their RCE on the Western Digital NAS. They head off to the disclosure room to dish the details.
5
1
16
Load more