Before a single packet is sent, a professional penetration tester needs written authorisation. This first module establishes the non-negotiable foundation of the entire course: you only ever test systems you own or are explicitly contracted, in writing, to assess. Everything that follows is taught for authorised, legal, defensive learning only.

You will learn what a scope document and rules of engagement (ROE) contain — in-scope IP ranges and hosts, excluded systems, permitted techniques, testing windows, emergency contacts and data-handling rules. You will see how concepts like consent, least impact, and responsible disclosure separate a security professional from a criminal.

Laws such as computer-misuse and unauthorised-access statutes make hacking without permission a serious crime worldwide. Understanding them is part of being a tester, not an afterthought.

Ethics & legal: Accessing, scanning or attacking any system without explicit written permission is illegal and can lead to criminal charges. Practise only in your own lab, on deliberately vulnerable training targets, or within a signed engagement scope.

📝 Written authorisation🎯 Defined scope🤝 Responsible disclosure

💻 OSCP / Ethical Hacking Exam Prep