4 ms·
No, you can't. But I haven't seen the evidence. It isn't legal to scan a website for vulns without permission. I assume the have evidence that he did scan the s
by eyeareque 12y ago
No, you can't. But I haven't seen the evidence. It isn't legal to scan a website for vulns without permission. I assume the have evidence that he did scan the site.
- lawnchair_larry 12y ago"It isn't legal to scan a website for vulns without permission." This isn't true. I do it quite a bit, so do other people who have no malicious intentions. Some professionals do it quite publicly, and even blog about it. Check out this guy, not just scanning for, but actually exploiting shellshock to execute commands on servers he doesn't own, internet-wide: http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-in... Are we better off with him in prison?
- eyeareque 12y agoYou're taking a risk when you do this. Not many people go after these types of scans, but you're basically doing it without permission. It's a grey area, be careful. If your scans cause an issue for the server, either through slowing the system down, or causing a web server to crash, you've now broken a law.