Ethics Charter and Legal Framework
Charter to sign before any access to targets: authorized scope, prohibited actions, data handling, and penalties for violations.
To be signed by each student in week 1, before any access to the targets.
Why a charter, and why sign it?
This course teaches techniques that, when used outside an authorized framework, constitute criminal offenses. The charter is not a formality: it makes the boundary between legal learning and an offense explicit, and formally commits the student. Signing it means acknowledging that you understand the limits (scope, authorization, data) and the consequences of overstepping them. It also protects the institution and the student.
Student Commitment
By enrolling in the "Penetration Testing & Offensive Security" module, I commit to:
Scope — Use the techniques I learn only on explicitly authorized environments: the lab's Docker targets, assigned HackTheBox/TryHackMe machines, and targets provided as part of the course.
Authorization — Never target any real system, network, application, or person without the owner's prior, explicit written authorization.
Legality — Comply with applicable law, including:
- in Quebec, section 342.1 of the Criminal Code of Canada (unauthorized use of a computer) and Law 25 (protection of personal information in the private sector);
- in France, articles 323-1 et seq. of the Penal Code (offenses against automated data processing systems) and the GDPR;
- and any equivalent law in my jurisdiction.