https://securingdev.github.io/posts/getting-humbled-with-bug-bounty-hunting/