“If you want to learn how to perform a cross-site scripting attack, Going through the training modules on that site will give you all the information that you need to know, and then you can take that information and apply it to the different types of bug bounties on the platform.”

Transcript evidence from Adam Bacchus and Jon Bottarini -- Two Sides to a Bug Bounty: The Researcher and The Program.