Even though the mutations required to get a h5n1 virus contagious between humans haven't been published, the process to generate them has been, and it is trivial to duplicate.

H5N1 in the hands of "bad" people is a matter of weeks or perhaps months (provided they have ferrets and the aviary strain of h5n1).