https://blog.modpr0.be/2019/09/09/cdef-podcast-head-to-head-bug-bounty-vs-pentesting/