Summary

This chapter summarized the approach used to find vulnerabilities and the state of mind we must have.

Then, we considered the various possibilities for disclosure after we find something, from full disclosure to coordinated disclosure, and how that can be handled both on the researcher’s side and by the organization receiving the report.

We hope you have found something interesting in this book and continue finding new ways to attack and exploit web applications and beyond. To close the book, in the words of Bilbo Baggins in The Fellowship of the Ring. “Don’t adventures ever have an End? I suppose not. Someone else always has to carry on the story”.