โ Cybersecurity & Ethical Hacking learning pathCybersecurity & Ethical Hacking ยท Module 2 of 10
Ethics and law
Understand legal and ethical boundaries.
๐ Key ideas
- Ethical hackers test only with written permission (scope and rules of engagement).
- Unauthorised access is illegal under India's IT Act 2000.
- Report findings responsibly to owners (responsible disclosure).
- Respect privacy and confidentiality of data seen during tests.
- Bug bounty programmes offer legal ways to report vulnerabilities.
๐ก Real-life example: An ethical hacker is a locksmith hired by the owner, never a burglar.
AuthorisationWritten permission to test
ScopeSystems allowed in a test
Responsible disclosureReporting privately to owners
Bug bountyRewards for authorised findings