---
id: 5464
title: "How to turn security research into profit: a CL.0 case study"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/how-to-turn-security-research-into-profit"
published_at: "2022-09-06T12:55:00Z"
tags: ["bug-bounty", "request-smuggling", "security-research", "methodology", "cl0", "desync"]
phying_url: "https://phying.com/item/5464"
lang: en
---

# How to turn security research into profit: a CL.0 case study

## Summary

Strategies for turning security research into bounty profit, using the CL.0 desync class as a case study: assess competition, find gaps in released scanners, and act before a technique saturates.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-09-06T12:55:00Z
- **Original:** https://portswigger.net/research/how-to-turn-security-research-into-profit
- **Phying News:** https://phying.com/item/5464