There isn't a super lucrative market for this type of thing that doesn't involve either the buyer or seller violating US law. The real money is probably someth

There isn't a super lucrative market for this type of thing that doesn't involve either the buyer or seller violating US law. The real money is probably something more boring than setting up exploits--such as setting up a security consulting practice that charges a ton of money. It's a lot easier because then you would have less pressure to discover completely novel exploits.