Zero-day Acquisition Program
We are currently acquiring zero-day related to the latest or the most recent versions of following products:
Operating Systems
Up to $100,000 for remote code or local privilege execution.
- Microsoft Windows 10
- Apple macOS 10.x
- Red Hat Linux
- CentOS, Ubuntu, Arch Linux
Smartphones
Up to $150,000 for remote code or local privilege escalation or any exploit
- Apple iOS 12.x
- Stock Android 9, 9.1, 10
- Cuntom ROM MIUI, EMUI, ColorOS
- BlackBerry 10
Application Software
Up to $75,000 for Remote code execution
- Office (Word, Excel, PowerPoint)
- Email Client (Outlook, eM, Mailbird, Thunderbird)
- PDF Readers (Adobe, Foxit)
- Archivers (7-Zip/WinRAR)
Web Servers
Up to $100,000 for remote code execution or information disclosure
- Apache
- Microsoft IIS
- Nginx
- LiteSpeed
Web Applications
Up to $75,000 for remote code execution, SQL injection, IDOR or information disclosure
- WordPress, Joomla, Drupal
- Xenforo, Discourse, vBulletin phpBB
- cPanel & WHM Version, Webmin
- Plugin and Theme
Bypass
Up to $75,000 for research or techniques related
- Mitigation and find bypass
- Tor De-anonymization
- Antivirus remote privilege execution
- Routers Pre-Auth RCE
Email Servers
Up to $75,000 for remote code execution
- MS Exchange
- Postfix
- Sendmail
Social Network
Up to $200,000 for any exploit
- Facebook
- Twitter
- Instagram
VoIP and Instant Messaging
Up to $200,000 for any remote exploit
- WhatsApp
- Viber
- Telegram
- Signal
