ExploitHub Evolved

 

logo

 

Exploithub was created with the intention to provide an open marketplace for the greater information security community consisting of penetration testers, security researchers, and exploit developers, among others. The marketplace was intended to be a platform for the information security community to transact with each other their non-zero-day, or n-day exploits, tools, and other software and hardware. To this end ExploitHub has been an unmitigated success, providing both space on the Internet for this activity as well as various marketplace tools to help users negotiate pricing, split payments among multiple developers, as well as other features. In order for ExploitHub to exist and provide this marketplace however, it needed to also cover its costs and turn a profit, and the volume at which this activity has been occurring within the marketplace has been in decline over the past few years and unfortunately no longer supports its continued operation.

The information security industry has changed significantly over the past few years. Back when ExploitHub started, n-day exploits for publicly known vulnerabilities were utilized far more. Nowadays however many pentesters rarely use exploits during engagements. Security vendors’ internal development teams have matured, requiring less external example to inform their internal development, and many now tend to roll their own exploit simulation or develop neutered exploits with no real payloads. It is also apparent that far more exploit developers today now choose to focus on zero-day vulnerabilities and sell their related exploits privately rather than publish findings and release public exploits.

After the last few years of bare bones operation and attempting to prove that a viable market still exists for publicly available n-day exploits, we have unfortunately been unable to do so. At this time, ExploitHub will be evolving into a private marketplace exclusively for exploits of zero-day vulnerabilities. Not only has the private zero-day market been proven viable by various players in this space for many years now, but the individual sales of zero-day assets command much higher prices and profit margins which will support continued operations.

It is regrettable that at this time we must sunset the open marketplace component of ExploitHub, and the decision to do so was a difficult one to make. Unfortunately the occasional sale of individual exploits for n-day vulnerabilities simply no longer supports the existence of such a marketplace.

To securely contact us regarding the purchase or sale of zero-day vulnerability information and related exploits, tools, or software, please securely PGP email us at zeroday@exploithub.com using the following PGP key, which may also be downloaded directly from the keyservers:



Key fingerprint: F4FD 9FB4 99E8 D5F4 5F04 A6D5 555B 33B9 F91F ACC8

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2
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=pK5L
-----END PGP PUBLIC KEY BLOCK-----