Hacker News Reader

this is not a way for you to demonstrate what can be done to a big client. ignore OP.

Source?

Common sense. You demonstrate on low profile accounts so when the “client” pays you for the real job, you still have access to the vulnerability.