If you want to try that route, there's an ethical way: look for companies with vulnerability disclosure programs on HackerOne or Bugcrowd.

Being well-written in your interactions with companies on those platforms would go a long way in improving your credibility.