#1
Here are a few websites that will pay you for findin vulns on sites
Hackerone.com
bugcrowd.com
firebounty.com
hackenproof.com
openbugbounty.org