Chapter 1

1. A growing number of companies are crowdsourcing their security audits—both to cut costs internally and benefit from the greater variety of researchers, strategies, and technologies.
2. Participating in bug bounty programs gives you valuable, practical security experience against real production targets. It also earns you money.
3. You'll need some basic web tech skills, but also a general curiosity and investigative desire to break things.
4. Some tool, such as Burp Suite, are workhorses that integrate multiple functions (proxying, scanning, mapping) for maximum effect, while some are for a more specific outcome (sqpmap for SQLi discovery, wfuzz for Brute Force file discovery, and so on) along with the single-purpose, one-off scripts that we assemble to add extra features or glue together workflows.
5. Adding document.location.origin can ensure that we are targeting...