Summary

This chapter has covered different types of security flaws that typically don't rise to the level of a profitable vulnerability, including DoS/DDoS, Self-XSS, and other types of attacks, as well as information that is commonly reported by scanners and pentesting tools but that don't necessarily interest bug bounty program operators. Along with various miscellaneous out-of-scope vulnerabilities, and an analysis of the common features that link these bugs together (they require other exploits, they have limited reach, they require social engineering or attacks on third-party services, and so on), you should have an understanding of not only what bugs don't get rewarded but why they aren't valuable. Now, moving forward, you can tune your own workflow to lower the noise in your reporting, and build a pentesting regimen that cuts down on time-wasting dead...