Selling 0-Days to Governments and Offensive Security Companies

Explore the intriguing world of vulnerability brokerage in this 39-minute Black Hat conference talk. Gain insider knowledge on the process of selling 0-day exploits to governments and offensive security companies. Delve into the operations of Q-recon, a vulnerability brokerage firm, and understand the market dynamics from three perspectives: researcher, broker, and client. Learn about the high-end market, acquisition methods, contractual aspects, property rights, customer acquisition, and collaborations with brokers. Discover the speaker's personal experiences and insights into this secretive industry. Uncover the intricacies of the vulnerability sales process, from initial discovery to final transaction.

Intro
About me
Overview
HighEnd Market
How do you get them
My experience
The process
The contract
Property rights
Finding customers
Working with brokers