This is like the 'nickpsecurity comment downthread. The problem with it is, people don't buy vulnerabilities the way they buy power tools; they don't think of all the different things they might do with them. People who buy vulnerabilities (a) have a very specific thing they plan on doing with that bug and (b) plan on doing it in exactly the same way to a large number of targets.

At the point where you're futzing around on someone's LAN looking for unsecured file shares --- something that perhaps 1 in 20 people actually have in 2015 (file shares at all, I mean) --- you're breaking both of those criteria.