It is getting harder due to security services like cloudflare & akamai and market saturation, but there will always be vulnerable sites for cashouts that can be blocked with free proxies and no captcha. It is a lot more work than it used to be, but money is still there if you can find private targets.