Reading a scope like an attacker
Most researchers skim the scope and start testing. The half hour you spend reading it properly is the highest-value half hour of the engagement.
How the work actually gets done.
Write-ups from the researchers who found the bugs, guides on how they work, and advisories from the companies that fixed them. A write-up is tied to a real report, published under that program’s own disclosure policy.