0day - fair game in pentesting?

Описание: Blog post: https://localhost.exposed/2016/10/31/...

I argue that using 0day exploits in a pentesting engagement is fair game if you happen upon such a scenario.

Unless they are explicitly ruled as out-of-bounds per the contract, it would be artificially limiting yourself from things that adversaries have access to anyway.