3 ms·
For aspiring pen testers who read this article, there's an important catch: if the rules of the challenge (or other Inversoft policies, like any bug bounty prog
by blincoln 10y ago
For aspiring pen testers who read this article, there's an important catch: if the rules of the challenge (or other Inversoft policies, like any bug bounty programmes they may have) didn't specifically allow targeting their other systems, then the author of the blog post could have been prosecuted under e.g. the CFAA.
Always read the list of in-scope systems and rules of engagement before starting. If that information hasn't been provided, then don't start until it has.