I am doing testing on some websites and I have found some serious bugs in those sites.
I am not sure if this is legal or not.
- Is it ever legal?
- How can I find out if it's legal where I live?
- What can I do to ensure I'm legally protected?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
Legality depends on the country... but, on a general basis, making tests on Web sites owned by other people without their consent is frowned upon and can get you in a lot of legal trouble.
Some site owners would be happy at learning of their security flaws and thank you warmly. Many others will think of it as a thinly disguised blackmail attempt, then call the cops and skin you alive.
I am not a lawyer in any way shape or form, you are responsible for your own actions.