Probably took weeks to build his own suite of automated tests for these types of exploits. All he has to do at this point is reconfigure the scripts to point to

Probably took weeks to build his own suite of automated tests for these types of exploits. All he has to do at this point is reconfigure the scripts to point to a new site/app with a bounty program, post report, and reap the benefits. Assuming he has done this for several other companies, I would say he has effectively earned more than what is put in