What is a Zero-day?
Zero-day exploits target zero-day vulnerabilities. Zero-day vulnerabilities are those for which no official patch has been released by the vendor. This means that no days (zero days) have elapsed between the time the vulnerability was discovered and the time an official patch was made available. Therefore, the administrators have had zero days to fix the flaw. It ceases to be a zero day once a fix is available.
Welcome to Our Exploit Exchange
Buy Zero-Day Exploits Through Mitnick SecurityMitnick’s Absolute Zero-Day™ Exploit Exchange is an exclusive brokerage service through which you can buy and sell zero-day exploits. Due to Mitnick Security’s unique positioning among security researchers and the hacker community, we are able to offer a specialized brokering service by connecting discerning government and corporate buyers with senior security researchers and exploit developers.
Mitnick specializes in only EXCLUSIVE, AKA “absolute,” zero-day exploits. We also provide custom penetration techniques and countermeasures that are researched, developed, and tailor-made to your specifications. Zero-day exploits may be purchased through a private auction or via direct purchase through our premium services.
IMPORTANT NOTICES: To be either a buyer or a seller of zero-day exploits through Absolute Zero-Day™, please understand the following:
This is not an open online forum in which anybody can buy and sell. It is a closed, referral network.
We develop trust relationships and establish loyalty with our buyers and sellers to provide the safest platform for exploit exchange.
Both buyers and sellers will be qualified. If we don’t know you, you will be charged fees to qualify to join, which will be set at our discretion.
We will not contravene any laws or trade restrictions under the laws of the United States of America.
UNDERSTANDING THE TYPE OF EXPLOITS WE BROKER:
We only deal with premium exploits. If you were to use the Common Vulnerability Scoring System (CVSS) as a guide, your exploit would be:
A CVSS of 8 or greater
Wide software distribution
Value of $100,000 USD+
Kevin David Mitnick (born August 6, 1963) is an American computer security consultant, author and Cracker, best known for his high-profile 1995 arrest and later five years in prison for various computer and communications-related crimes. Mitnick’s pursuit, arrest, trial, and sentence along with the associated journalism, books and films were all controversial. He now runs a security firm named Mitnick Security Consulting, LLC that helps test a company’s security strengths, weaknesses, and potential loopholes, is the Chief Hacking Officer of security awareness training company KnowBe4 and an active advisory board member at Zimperium, a firm that develops a mobile intrusion prevention system.
Mitnick grew up in Los Angeles and attended James Monroe High School. He was enrolled at Los Angeles Pierce College and USC. For a time, he worked as a receptionist for Stephen S. Wise Temple.
At age 16, Mitnick used social engineering and dumpster diving to bypass the punch card system used in the Los Angeles bus system. After a bus driver told him where he could buy his own ticket punch, he could ride any bus in the greater LA area using unused transfer slips he found in the trash. Social engineering later became his primary method of obtaining information, including user-names and passwords and modem phone numbers.
Mitnick first gained unauthorized access to a computer network in 1979, at 16, when a friend gave him the phone number for the Ark, the computer system Digital Equipment Corporation (DEC) used for developing their RSTS/E operating system software. He broke into DEC’s computer network and copied their software, a crime he was charged with and convicted of in 1988. He was sentenced to 12 months in prison followed by three years of supervised release. Near the end of his supervised release, Mitnick hacked into Pacific Bell voice mail computers. After a warrant was issued for his arrest, Mitnick fled, becoming a fugitive for two and a half years.
According to the U.S. Department of Justice, Mitnick gained unauthorized access to dozens of computer networks while he was a fugitive. He used cloned cellular phones to hide his location and, among other things, copied valuable proprietary software from some of the country’s largest cellular telephone and computer companies. Mitnick also intercepted and stole computer passwords, altered computer networks, and broke into and read private e-mails.
Arrest, conviction, and incarceration
After a well-publicized pursuit, the FBI arrested Mitnick on February 15,1995, at his apartment in Raleigh, North Carolina, on federal offenses related to a 2½-year period of computer hacking which included computer and wire fraud. He was found with cloned cellular phones, more than 100 clone cellular phone codes, and multiple pieces of false identification.
Mitnick was charged with wire fraud (14 counts), possession of unauthorized access devices (8 counts), interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to a computer.
In 1999, Mitnick pleaded guilty to four counts of wire fraud, two counts of computer fraud and one count of illegally intercepting a wire communication, as part of a plea agreement before the United States District Court for the Central District of California in Los Angeles. He was sentenced to 46 months in prison plus 22 months for violating the terms of his 1989 supervised release sentence for computer fraud. He admitted to violating the terms of supervised release by hacking into PacBell voicemail and other systems and to associating with known computer hackers, in this case co-defendant Lewis De Payne.
Mitnick served five years in prison—four and a half years pre-trial and eight months in solitary confinement—because, according to Mitnick, law enforcement officials convinced a judge that he had the ability to “start a nuclear war by whistling into a pay phone”, meaning that law enforcement told the judge that he could somehow dial into the NORAD modem via a payphone from prison and communicate with the modem by whistling to launch nuclear missiles. In addition, a number of media outlets reported on the unavailability of Kosher meals at the prison where he was incarcerated.
He was released on January 21, 2000. During his supervised release, which ended on January 21, 2003, he was initially forbidden to use any communications technology other than a landline telephone. Mitnick fought this decision in court, eventually winning a ruling in his favor, allowing him to access the Internet. Under the plea deal, Mitnick was also prohibited from profiting from films or books based on his criminal activity for seven years, under a special judicial Son of Sam law variation. Mitnick now runs Mitnick Security Consulting LLC, a computer security consultancy and is part owner of KnowBe4, provider of the world’s most popular integrated platform for security awareness training and simulated phishing testing.
In December 2002 an FCC Judge ruled that Mitnick was sufficiently rehabilitated to possess a federally issued amateur radio license.
Mitnick’s criminal activities, arrest, and trial, along with the associated journalism, were all controversial. Though Mitnick has been convicted of copying software unlawfully, his supporters argue that his punishment was excessive and supporters of Mitnick have asserted that many of the charges against him were fraudulent and not based on actual losses.
In his 2002 book, The Art of Deception, Mitnick states that he compromised computers solely by using passwords and codes that he gained by social engineering. He claims he did not use software programs or hacking tools for cracking passwords or otherwise exploiting computer or phone security.
John Markoff and Tsutomu Shimomura who had both been part of the pursuit, wrote the book Takedown about Mitnick’s capture.
Jonathan Littman wrote The Fugitive Game in response, alleging:
Journalistic impropriety by Markoff, who had covered the case for the New York Times, based on rumor and government claims, while never interviewing Mitnick himself;
Overzealous prosecution of Mitnick by the government;
Mainstream media over-hyping Mitnick’s actual crimes;
Shimomura’s involvement in the matter being unclear or of dubious legality.
Further controversy came over the release of the movie based on the book by John Markoff and Tsutomu Shimomura, with Littman alleging that portions of the film were taken from his book without permission. The case against Mitnick tested the new laws that had been enacted for dealing with computer crime, and it raised public awareness of security involving networked computers. The controversy remains, however, and the Mitnick story is often cited today as an example of the influence that mainstream newspapers can have on the law enforcement personnel.
Since 2000, Mitnick has been a paid security consultant, public speaker and author. He does security consulting for Fortune 500 companies, performs penetration testing services for the world’s largest companies and teaches Social Engineering classes to dozens of companies and government agencies.
In 2000, Skeet Ulrich and Russell Wong portrayed Kevin Mitnick and Tsutomu Shimomura in the movie Track Down (known as Take Down outside the USA), which was based on the book Takedown by John Markoff and Tsutomu Shimomura. The DVD was released in September 2004. A documentary named Freedom Downtime was produced by 2600: The Hacker Quarterly in response to Takedown.
On August 18, 2011, Mitnick appeared on The Colbert Report to talk about his new book. On August 23, Mitnick was interviewed on Coast to Coast AM during the episode “Hacking & Technology”. On August 24, he appeared on the TWiT.tv network’s Triangulation episode.
On September 12, 2011, Mitnick answered readers’ questions on the technology news site Slashdot. This was the second time he was interviewed on Slashdot, the first time being in February 2003.
Mitnick’s story was a partial inspiration for Wizzywig, Ed Piskor’s graphic novel about hackers.