18. Ethics, the Law and a Safe Kali Lab
18.1 The One Rule: Permission and Scope
Ethical hacker aani cyber criminal ekach tools, ekach techniques vapartat. Farak don goshtincha: likhit parvangi (written permission) aani tharavlela vyaap (scope). He nasel, tar tech kaam gunha aahe – "mi fakt shikat hoto" he uttar court madhe chalat nahi.
| Question | Ethical hacker | Criminal |
|---|---|---|
| Do you have written permission? | Yes, signed, before starting | No |
| Is the target inside an agreed scope? | Yes, exact IPs/domains listed | Attacks anything |
| What is the intent? | Find and help fix weaknesses | Wrongful gain or damage |
| What happens to findings? | Reported confidentially to the owner | Sold, leaked or abused |
| Are actions logged and reversible? | Yes, careful not to damage data | Often destructive |
Professionals work under a scope document (also called rules of engagement / अधिकृत परवानगी पत्र): it lists exactly which systems may be tested, which techniques are allowed, the time window, and who to call if something breaks. Bug bounty programs publish the same thing as a "program policy".
Only test what you own or have written permission for
Every lab in Parts 10 and 11 targets only your own machines: the Kali VM, Metasploitable 2, DVWA, OWASP Juice Shop, and your own reels app from Chapter 16. Scanning or attacking any other computer, website, Wi-Fi or phone without written permission is a crime in India, even "just to check" or "just to learn".
Ravindra Bagale's Tip
Khup students utsahat mitrachya website var kiwa shejarchya Wi-Fi var Nmap chalavtat – "fakt baghat hoto" mhanun. Ha gunha aahe aani career suru honyaadhich sampu shakto. Lakshat theva: parvangi aadhi, tool nantar. Sarav sathi tumcha swatahcha lab aahe – tithe kahihi kara, koni kahi mhanat nahi.
Practice task
Write a one-page scope document for your own lab: list the VM names and their host-only IP range as the only in-scope targets, the allowed techniques, and a line stating that nothing outside this range will ever be touched. Keep it with your notes.