Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ethical-hacking]

An ethical hacker, also known as a whitehat hacker, is a security professional who applies their hacking skills for defensive purposes on behalf of the owners of information systems. Use this tag for questions about legal issues related to ethical hacking. Do not use this tag for questions related to ethics in general.

2
votes
2answers
80 views

Hacking a scammer: is this guy breaking the law by deleting phishing data?

I just watched this video. In it the presenter hacks a phishing website using a SQL injection attack and then deletes the database of harvested emails and passwords. Assuming that he did this to a ...
0
votes
2answers
57 views

Duty of care dilemma when reporting Web vulnerabilities to both Stakeholders and Web Service owner

Ok, I am going to ask this question with an Analogy. A Locksmith is walking in the street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe ...
0
votes
1answer
93 views

Legal status of responsible disclosure

In the current security landscape it is common to offer responsible disclosure to (ethical) hackers to report vulnerabilities in such a way that the company does not pursue legal action against this ...
-3
votes
1answer
75 views

does law defines any hacker rules? [closed]

does law defines any limitation that tells how much can a hacker use his knowledge in different way? Any boundary that tells about hacker and cracker.
5
votes
2answers
141 views

Are publicly available password dumps legal under GDPR

When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
2
votes
0answers
110 views

Is it illegal to perform wifi hacks on your own home network using tools like WiFiPhisher, Aircrack, and Wireshark?

Apologies if this has been asked countless times. I've seen it a few times around here however they usually pertain to someone having written permission. And I don't... Or if someone could post a ...
0
votes
1answer
860 views

Is it illegal to create and sell a exploit of a zero-day vulnerability?

The definition of an exploit: A software tool designed to take advantage of a flaw in a computer system, typically for malicious purposes such as installing malware. The definition of a zero-day ...
2
votes
0answers
411 views

As a Developer how should my contract be worded to protect against hacking

I am a web developer and have a contract for client based projects that has been improved over years and many projects. However after reading it this month I think that upgrading the section that ...
3
votes
1answer
419 views

Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses

I am wanting to scan a site (which I do not own) to see if they are vulnerable to anything like Heartbleed or the POODLE attack, not because I want to exploit any such vulnerabilities for malicious ...