I am doing testing on some websites and I have found some serious bugs in those sites.
I am not sure if this is legal or not.
- Is it ever legal?
- How can I find out if it's legal where I live?
- What can I do to ensure I'm legally protected?
Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.
Legality depends on the country... but, on a general basis, making tests on Web sites owned by other people without their consent is frowned upon and can get you in a lot of legal trouble.
Some site owners would be happy at learning of their security flaws and thank you warmly. Many others will think of it as a thinly disguised blackmail attempt, then call the cops and skin you alive.
I am not a lawyer in any way shape or form, you are responsible for your own actions.