I am very excited to take part in bug crowd. All my life I’ve wanted to be a penetration tester, but I feel no one will hire me due to the fact I have an associates degree. Regardless, I had a quick question for you guys (and gals, maybe? no? ok).
It’s embarrassing, but do you guys do you web application testing from home? I’m just paranoid that my ISP is going to call me and be like “I noticed you doing a lot of scans”. Or I’m afraid that the company will call my ISP and say “our Snort box detected that IP XX.XX.XX.XX is performing SQL injections on our web app”.
Long story short, are there any legal complications to web app testing?
Should I use a VPS or VPN?