Selling 0-Days to Governments and Offensive Security Companies

No ratings

Presented at BlackHat USA 2019 by

Maor Shwartz

Selling 0-days is a fascinating process that not a lot of people are familiar with. This talk will discuss a vulnerability brokerage company called Q-recon and provide a glimpse of how this market works. In the presentation the following questions will be answered from three different angles (researcher/broker/client):Who (researcher profile) is selling 0-days to governments / offensive security companies?What is the process of selling 0-days?How to sell 0-days?At the end of the presentation, I will give a few tips for researchers that want to sell 0-days to offensive security companies/governments.