Except that, if you're going after the bounty, you'll have read the rules, which define the particular attempts you're making as out of bounds, i.e., still malicious.

I'm trying, but failing, to find a recent article about a guy who found a password in a dropbox for another company that had a "hack us" contest, and subsequently was indirectly accused of potentially illegal conduct (they settled on sending him a shirt instead of money).