Additional info I'm living in the UK(Scotland) and testing targets are scattered around the world(but mainly in UK, EU and USA)
I'm just writing some wrapper around the recon tools that I want to use during bug bounties. The question is about the legal side of using port scans(I'm thinking about using rustScan or nmap). I'm assuming that when it isn't on the list of things that I shouldn't be doing then it should be fine. But what about situations with shared hosting or situation in which the server belong to a different company than web app that I need to test. Any easy way to be sure when it should be fine to use it and when I should do recon without it?