18. Ethics, the Law and a Safe Kali Lab
18.1 The One Rule: Permission and Scope
Ethical hacker aani cyber criminal ekach tools, ekach techniques vapartat. Farak don goshtincha: likhit parvangi (written permission) aani tharavlela vyaap (scope). He nasel, tar tech kaam gunha aahe – "mi fakt shikat hoto" he uttar court madhe chalat nahi.
| Question | Ethical hacker | Criminal |
|---|---|---|
| Do you have written permission? | Yes, signed, before starting | No |
| Is the target inside an agreed scope? | Yes, exact IPs/domains listed | Attacks anything |
| What is the intent? | Find and help fix weaknesses | Wrongful gain or damage |
| What happens to findings? | Reported confidentially to the owner | Sold, leaked or abused |
| Are actions logged and reversible? | Yes, careful not to damage data | Often destructive |
Professionals work under a scope document (also called rules of engagement / अधिकृत परवानगी पत्र): it lists exactly which systems may be tested, which techniques are allowed, the time window, and who to call if something breaks. Bug bounty programs publish the same thing as a "program policy".
Only test what you own or have written permission for
Every lab in Parts 10 and 11 targets only your own machines: the Kali VM, Metasploitable 2, DVWA, OWASP Juice Shop, and your own reels app from Chapter 16. Scanning or attacking any other computer, website, Wi-Fi or phone without written permission is a crime in India, even "just to check" or "just to learn".
Ravindra Bagale's Tip
In their excitement, many students run Nmap against a friend's website or the neighbour's Wi-Fi – "just looking". That is a crime, and it can end your career before it even starts. Remember: permission first, tools later. You have your own lab for practice – do anything there, and nobody will say a word.
Ravindra Bagale's Tip – मराठी
बरेच students उत्साहात मित्राच्या website वर किंवा शेजारच्या Wi-Fi वर Nmap चालवतात – "फक्त बघत होतो" म्हणून. हा गुन्हा आहे आणि career सुरू होण्याआधीच संपू शकतं. लक्षात ठेवा: परवानगी आधी, tool नंतर. सरावासाठी तुमचा स्वतःचा lab आहे – तिथे काहीही करा, कोणी काही म्हणत नाही.
Ravindra Bagale's Tip – हिंदी
बहुत से students जोश में दोस्त की website या पड़ोसी के Wi-Fi पर Nmap चला देते हैं – "बस देख रहा था" कहकर. यह अपराध है और career शुरू होने से पहले ही ख़त्म हो सकता है. याद रखो: इजाज़त पहले, tool बाद में. Practice के लिए तुम्हारा अपना lab है – वहाँ कुछ भी करो, कोई कुछ नहीं कहेगा.
Practice task
Write a one-page scope document for your own lab: list the VM names and their host-only IP range as the only in-scope targets, the allowed techniques, and a line stating that nothing outside this range will ever be touched. Keep it with your notes.