Re:Ask HN: What is the best way to get paid for discovering ...
by ryanlol on Thursday July 23, 2015 @01:28PM
(#9937203)
Depends greatly on the context. Selling exploits definitely isn't "straight up illegal". Selling vulns much less so.
What OP doesn't mention is that there are legitimate brokers. You dont have to use those shitty hackerone services.