Re: [Full-disclosure] Selling codes exploiting 0-days vulnerabilities

Do you accept Western - Union 409 payments to your priest friend in nigeria?
On a more serious note, how do you reach a contractual agreement with
the purchaser before the transfer of money and code? Do you verify
identities or is this more of a sort of e-drug dealing type of thing?
How is the purchaser assured of receipt of exploit details, what sort
of buyer assurances do you provide?

Let us know on-list, perhaps we can stimulate a conversation about
appropriate methods for independent exploit brokerage!

Sincerely,

Travis
On Jan 26, 2008 6:58 PM, Gerrit-Jan Nieuwegein <gj.nieuw@xxxxxxxxx> wrote:
Hi All,

My name is Gerrit-Jan. I'm posting this message because I'm security
engineer which codes some "exploits" about 0-days vulnerabilities. Through
this mailing-list, I'm selling these codes. For the moment, I have
interesting exploits for Windows, UNIX and Linux.
Feel free to contact me by e-mail (only if you are interested).

Have nice day,

Cheers,

G.J.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages