Free preview lesson · Ethical Hacking & Penetration Testing · Module 1: Reconnaissance and OSINT
Scoping, rules of engagement and permission
Every legitimate penetration test starts before a single scan is run: with scope and written permission. Skipping this step is what turns testing into an offence.
Why permission comes first
Testing systems without authorisation is illegal in most countries, regardless of intent. A signed scope document protects you and the client.
What a scope contains
Target systems and addresses, testing windows, allowed techniques, out-of-scope assets and emergency contacts.
Rules of engagement
Agree how you will handle discovered data, when to stop, and who to call if something breaks.
Common pitfall
Assuming a verbal OK is enough. Always get permission in writing.
Action step
Draft a one-page scope for a lab you control, listing targets, timing and excluded actions.
This is one lesson from Ethical Hacking & Penetration Testing.
Educational content only. No income, revenue or earnings results are promised or implied. No certification, licence or professional credential is awarded.