Can you legally sell exploits of physical systems? Say, a book containing instructions for breaking into any military installation?

Maybe it would be enough if an international treaty required all nations, and their intelligence and law enforcement arms, to abstain from using software exploits, and requiring them to disclose any exploit information they acquire to system vendors for prompt correction.