Hello everyone and welcome to the nmap
course.
So in this video we are going to see the legal considerations
which are very very important before
we start our nmap exploitation
Journey.
So the official document of nmap has an amazing
write-up about the legal issues that are involved with
Port scanning which is available at this particular
link. You can just go there and you can read about
it.
I'm not a lawyer, but I will give you the brief
overview.
Of what can go wrong and where
you should stop?
What can be considered as legal or what can
be considered as illegal while performing
scans over?
Networks which are exposed to the internet.
So the things you should keep in mind while scanning different
countries implies different rules. The safest
way is to scan the networks you own or
you have the explicit permissions to
scan.
so two questions, which has the
most importance is
the first one is is Port scanning legal.
Yes, it is legal if and
only if
You are the owner of the network and the systems which you
are going to start scanning.
Also, you need explicit permissions
for scanning the networks and systems, which I
have expressed already.
So
it can be considered illegal in case
you do not have permission to scan the network.
You are not the owner of the network.
You degrange someone's ability of a
network and system. Basically, you must
can or you perform exploitation onto
that particular Network and due
to some reason that particular Network or
the devices or the server goes under
a dose, which is denial of
service then.
This can be considered as illegal.
So I would recommend that do not blindly
start scanning anything that
you want onto the internet apart from
the bug Bounty programs. I would recommend not to
scan any other websites or
web service which do not have a responsible vulnerability
disclosure program or you
may
unknowingly break something into the network.
I wish you all the best to start the journey and
you can
start doing nmap on bug Bounty programs.
Thank you.