Selling Existing Vulnerabilities

1. 2022-10-08 at 9:52 PM UTC

   #1
   

   Misterigh Houston
   Lets say hypothetically someone had a bunch of live vulnerabilities in websites that could be used to obtain different kinds of information and that this person didn't feel like putting the time into harvesting the data, could these be easily sold?
   
   Would the US government buy these if they were within their own websites?
   
   Obviously it would be illegal for this person to find these, but what if the person just enjoyed finding them and wanted to make a little extra money?
2. 2022-10-08 at 10:34 PM UTC

   #2
   

   Ghost Black Hole
   can you do that for minecrafrtt
3. 2022-10-08 at 10:43 PM UTC

   #3
   

   Blunt Wrap Supreme Houston
4. 2022-10-09 at 1:43 AM UTC

   #4
   

   A College Professor victim of incest [your moreover breastless limestone]

   Originally posted by Blunt Wrap Supreme Got vulns on here, anyone wanna buy it?

   
   yee but you gotta show me how to use it. ill mail u a personal cheque , dat cool? fiddy bux, maybe more depending what it can do??? wut u fink
5. 2022-10-09 at 1:24 PM UTC

   #5
   

   Blunt Wrap Supreme Houston
6. 2022-10-10 at 1:48 PM UTC

   #6
   

   Sophie Pedophile Tech Support
   Are these vulnerabilities 0day? If so Zerodium will pay a premium for those.
7. 2022-10-10 at 9:57 PM UTC

   #7
   

   Misterigh Houston

   Originally posted by Sophie Are these vulnerabilities 0day? If so Zerodium will pay a premium for those.

   
   Let's say hypothetically that there was an issue with NIS and someone could modify(maybe SQL, maybe not) a request that was being sent to the server and could get back somebodies password. Things like that, but with other data like SSN, DL, DOB, MMN, etc. Maybe US government sites, maybe not.
8. 2022-10-11 at 4:04 AM UTC

   #8
   

   Sophie Pedophile Tech Support

   Originally posted by Misterigh Let's say hypothetically that there was an issue with NIS and someone could modify(maybe SQL, maybe not) a request that was being sent to the server and could get back somebodies password. Things like that, but with other data like SSN, DL, DOB, MMN, etc. Maybe US government sites, maybe not.

   
   like web app vulns of a more traditional nature? Depending on the department of the government they may have a bug bounty program. The real money is in 0days though.