A question for "ethical hackers" or cyber security professionals. I am very interested in the world of cyber security and all aspects of it. I am genuinely interested in the security aspect of it and from a highly ethical and moral perspective. I have purchased "self-teaching" online courses for learning cyber security, this is also dubbed loosely "ethical hacking".
At this point we should not debate my intentions with such activities and I wish you to take them as genuinely ethical. I do understand that many high level organizations such as the NSA, Intelligence Agencies in many countries etcetera do monitor these activities heavily. Therefore I'm sure any such research would be monitored one way or another--- enough said on that.
My question here is, how is it possible to learn in this direction if my country and many others forbid even the possession of software for "hacking" despite intentions? This seems one of the main tools used to learn vulnerabilities and how to defend against them. For ones own security purposes as well as better security for others also and my own software development securities.
While I understand the intentions behind such laws being directed at nefarious intentions, what about progress in this direction, what about people who want to enter the field or simply learn for ethical reasons? According to the criminal code of Canada there is no grey area, see first link below.
An FYI of how I intended to go about learning "hacking" ethically. By using my computer to break into my old brick laptop and learning from there. I wouldn't use such software to hack anyone else unethically, just not interested.