6 ms·
I wasn't clear on the verification performed to ensure the client had authority to perform testing against the chosen target.
by nannal 3y ago
I wasn't clear on the verification performed to ensure the client had authority to perform testing against the chosen target.
- microphp 3y agoYou have to verify user.
- nannal 3y agoI think you misunderstand the concern, suppose a user enters gov.mil as a domain to test with which they are unaffiliated. The tools test it and with disastrous affect all governmental and military services go offline. It would be reasonable to then take legal action against the platform rather than the user, as the user did not confirm they had permission to perform testing or that they understood the risks involved.