[Sw1x]

This thread will be filled with question that is written in the comment section!
Get your questions answered, get help here!

Hello, I've been thinking a lot about getting money of the site host, by showing the exploit I can find to hack him, some tips would be good, otherwise have a nice day/night. :)
I'll do my best to answer what comes in here, try answer my question. ^^
I'll start!
Questions that will appear on the thread:

1. How much can I earn? By Sw1x
   

Answers:

1. You ask the site owner for permission BEFORE exploiting. Otherwise you get a C&D.
   Also, most dont pay. Not even Facebook or google. They say they will, but the check never comes in the mail.
   So basically ask permission. If they say yes, do it.
   They say no, walk away. Answered by: KILLM3
   

[Best Teemo NA]

You will earn jail time for Black-Mail.

Reason: You were not hired and did not have permission to pentest the server(s), therefore asking for money to give something you found illegally is Black-Mail.

[Sw1x]

You will earn jail time for Black-Mail.

Reason: You were not hired and did not have permission to pentest the server(s), therefore asking for money to give something you found illegally is Black-Mail.

No but what I mean is, if I find exploits on sites, what I can do is tell them and get money for it... Then my question is how much can I earn on a medium site that got some exploit? Not deface it, but just tell admin/moderator about the exploit.

[Best Teemo NA]

No but what I mean is, if I find exploits on sites, what I can do is tell them and get money for it... Then my question is how much can I earn on a medium site that got some exploit? Not deface it, but just tell admin/moderator about the exploit.

You must really be a complete fucking idiot.

[Sw1x]

You must really be a complete fucking idiot.

It's just a question, sorry if it wasn't for your "taste"...

[KILLM3]

Experienced whitehat here...
You ask the site owner for permission BEFORE exploiting. Otherwise you get a C&D. I have a stack of C&D's -.-, so basically I cant gisit their site without risking getting sued.
So basically ask permission. If they say yes, do it. They say no, walk away.

Also, most dont pay. Not even Facebook or google. They say they will, but the check never comes in the mail.

[Sw1x]

Experienced whitehat here...
You ask the site owner for permission BEFORE exploiting. Otherwise you get a C&D. I have a stack of C&D's -.-, so basically I cant gisit their site without risking getting sued.
So basically ask permission. If they say yes, do it. They say no, walk away.

Also, most dont pay. Not even Facebook or google. They say they will, but the check never comes in the mail.

Thanks for the answer! This answers my question.