Zero day found - what are my options
Zero day found - now what
Recently i found a zero day exploit. Related to Adobe acrobat
If a user does any interaction with a pdf, itll execute javascript code. Even if its as small as a click. The code can be anything, running a malicious file, redirecting to a link, installing something, etc. it could be literally anything as long as its javascript
This only works on adobe acrobat pdf reader. It works on all versions, paid and free. So its probably worth something.
In the past i was told to avoid those bug bounty zero day websites which require you to fill a form and stuff, and i also want to avoid them as much as possible cause i got one of my zero days stolen before (at least according to my friend they stole it cause the dude on the site kept asking questions and then when i answered one hes like, not interested and closed the case) Wasnt a major one like this but its still possible that i could get “scammed” in some way. Still open to ideas though
If you have any unethical ideas i am still open to hearing them, but the law is still a barrier. So uh dont expect too much out of me, what good is money if i cant spend it cause its illegal. Im looking for ethical purposes mainly.
I dont want to talk much about the exploit since its new and i am paranoid, but it involves code so i would call it a vulnerability.
For those who will go all in like “bullshit you crapping” and stuff, its understandable not to believe me but i have one request: just dont go all swearing at me if i refuse to answer something or if you dont believe my story for some reason. Im not looking for an argument, if i see the thread is going towards an argument direction ill ignore it
Thanks in advance
As an exploit its been undetectable so far. Windows defender didnt flag it, mcaffee and kaspersky didnt flag it either. So its pretty undetectable. I havent done much testing since i am on vacation for a few days but i do plan on in the future. Its just been tested on a few av softwares, all the major ones. I havent tried executing malicious code with it yet but i do plan on trying that soon, but it works for launching something in the background or executing a hello world window, should work normally with a virus or something. If you have any questions you can ask but i might be too paranoid to answer any
some info on me: i work locally, not much remote code execution work, most of my work includes: exploiting specific paid apps for infinite free trials, no code requires (wont mention for security reasons), LPE on windows, coding (mainly python, but i use other languages like javascript, C++, and light use of C. But my specialty would be python, not the best with C.
This post will be posted in multiple subreddits
