That’s because you’re misunderstanding the purpose of CISSP. It’s about risk mitigation and governance, not 0days and buffer overflows.

If you want that, hire a hacker.