<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/css" href="/stylesheets/rss.css"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/">
  <channel>
    <title>ClearNet Security: Tag immunity</title>
    <link>http://blog.clearnetsec.com/articles/tag/immunity</link>
    <language>en-us</language>
    <ttl>40</ttl>
    <description></description>
    <item>
      <title>&#8220;Big money!  Big prizes!  I love it!&#8221;</title>
      <description>&lt;img src="http://blog.clearnetsec.com/files/smashtv1.jpg" align="right"&gt;
&lt;p&gt;&lt;a href="http://en.wikipedia.org/wiki/Smash_TV"&gt;Smash TV &lt;/a&gt;quotes.  Love &#8216;em.  
&lt;/p&gt;
&lt;p&gt;
Speaking of big money, the commercial exploit market&#8217;s growth isn&#8217;t making it any easier to bid on penetration test gigs.  If you want to provide the highest assurance you&#8217;re capable of to clients, then of course you would like to have your hands on all the exploits out there, both public and private.      
&lt;/p&gt;

&lt;table border="1"&gt;
  &lt;tr&gt;
    &lt;th&gt;product&lt;/th&gt;
    &lt;th&gt;to start&lt;/th&gt;
    &lt;th&gt;quarterly&lt;/th&gt;
    &lt;th&gt;total&lt;/th&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td&gt;&lt;a href="http://d2sec.com/products.htm"&gt;d2&lt;/a&gt;&lt;/td&gt;
    &lt;td&gt;$1,950&lt;/td&gt;
    &lt;td&gt;$850&lt;/td&gt;
    &lt;td&gt;$5,350&lt;/td&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td&gt;&lt;a href="http://gleg.net/vulndisco_prices.shtml"&gt;gleg&lt;/a&gt;&lt;/td&gt;
    &lt;td&gt;$1,400&lt;/td&gt;
    &lt;td&gt;$700&lt;/td&gt;
    &lt;td&gt;$4,200&lt;/td&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td&gt;&lt;a href="http://gleg.net/argeniss_pack.shtml"&gt;argeniss &lt;/a&gt;&lt;/td&gt;
    &lt;td&gt;$1,000&lt;/td&gt;
    &lt;td&gt;$500&lt;/td&gt;
    &lt;td&gt;$3,000&lt;/td&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td&gt;&lt;a href="http://www.immunitysec.com/products-canvas.shtml"&gt;canvas&lt;/a&gt;&lt;/td&gt;
    &lt;td&gt;$1,450&lt;/td&gt;
    &lt;td&gt;$730&lt;/td&gt;
    &lt;td&gt;$4,370&lt;/td&gt;
  &lt;/tr&gt;
&lt;/table&gt;
&lt;br /&gt;
&lt;p&gt;
And the cr&#232;me of the crop:&lt;br /&gt;
&lt;b&gt;Immunity Sec&#8217;s Vulnerability Sharing Club	$50,000 - $100,000 per year&lt;/b&gt;
&lt;/p&gt;
&lt;p&gt;
Attacking with anything less in hand tends toward negligence, especially if you do so without disclosing what you&#8217;re missing.  Pay to have all and you&#8217;ve likely priced yourself out of competitive bids.  
&lt;/p&gt;
&lt;p&gt;
The winners here, again, are the attackers.      
&lt;/p&gt;
&lt;p&gt;
&#8220;Good Luck&#8230; you&#8217;ll need it!&#8221;
&lt;/p&gt;
&lt;img src="http://blog.clearnetsec.com/files/smashtv.jpg" align="left"&gt;
&lt;br /&gt;

</description>
      <pubDate>Fri, 28 Dec 2007 08:57:00 -0700</pubDate>
      <guid isPermaLink="false">urn:uuid:5b29bc79-91d9-4ca9-bf12-d9426ee719ee</guid>
      <author>tate@ClearNetSec.com (Tate Hansen)</author>
      <link>http://blog.clearnetsec.com/articles/2007/12/28/%E2%80%9Cbig-money-big-prizes-i-love-it-%E2%80%9D</link>
      <category>security</category>
      <category>ClearNet</category>
      <category>ClearNet Security</category>
      <category>Tate Hansen</category>
      <category>Penetration Testing</category>
      <category>gleg</category>
      <category>immunity</category>
      <category>argeniss</category>
      <category>d2</category>
      <category>exploits</category>
    </item>
  </channel>
</rss>
