Selling 0-Days to Governments and Offensive Security Companies

Selling 0-days is a fascinating process that not a lot of people are familiar with. This talk will discuss a vulnerability brokerage company called Q-recon and provide a glimpse of how this market works. In the presentation the following questions will be answered from three different angles (researcher/broker/client):

• Who (researcher profile) is selling 0-days to governments / offensive security companies?
• What is the process of selling 0-days?
• How to sell 0-days? At the end of the presentation, I will give a few tips for researchers that want to sell 0-days to offensive security companies/governments.