Hands-On Bug Hunting for Penetration Testers
上QQ阅读APP看书,第一时间看更新

Third-Party Marketplaces

Marketplaces are sites that match companies and researchers. They standardize the submission process, rules of engagement disclosure, and other documentation, while providing forums, teaching blogs, and other services to the community. Marketplaces are good sources of technical information and the metrics they typically collect – related to things such as a company's response time and average payout – can help you decide where to direct your efforts. The consistent submission standards mean you can also develop a template  we'll show you an example later  that can be modified and reused between engagements. This allows you to automate tooling around information-gathering, which will make your entire workflow easier and more consistent.