Rules for Pentest Training

I will follow laws and good manners. I will not interfere with proper operation of computers or networks. I will not invade anyone’s privacy. I know that criminal or misguided actions can later come up on background checks and make it very difficult to get intersting security jobs.

I will only attack given practice targets. I will be careful with IP addresses. If needed, I will disconnect computers from the Internet while testing and follow traffic with a separate tool. If I’m not sure about legality or permissions, I will not perform tests. If a mistake or accident happens, I will immediately inform involved parties.

I know that penetration testing companies requires prior written permissions. Scope (allowed targets) and rules of engagement (what you’re allowed to do) must be clearly laid out. It’s important to verify (for each system, network, platform and component), who has the authority to give the permission.

https://TeroKarvinen.com