Answer 1

But I think moderators team voice on this might be more appropriate ...

Answer 2

Great discussion!
My opinion is not based on coding, but rather on other precedents already existant.

If you were to develop a tool that was only designed to bring harm to others, then you may be held accountable for those who used the tool.

But if you were to create a tool for the benefit of others, which was misused in a manner which caused harm to others, then I don't believe you should be held accountable.

But, you may need to justify your actions / decisions.

A valid point made to me recently was that these sort of decisions are based upon local laws and jurisdictions.

Answer 3

Hi Kode Krasher,
I'm not against this personally, but it seems we are all responsible for what we put on the service (SoloLearn)

From the Terms of use ...

"Who is responsible for what I see and do on the Services?

Any information or Content publicly posted or privately transmitted through the Services is the sole responsibility of the person from whom such Content originated, and you access all such information and Content at your own risk, and we aren’t liable for any errors or omissions in that information or Content or for any damages or loss you might suffer in connection with it."

Also a nearby paragraph,

"You are responsible for all Content you contribute, in any manner, to the Services, and you represent and warrant you have all rights necessary to do so, in the manner in which you contribute it. You will keep all your registration information accurate and current. You are responsible for all your activity in connection with the Services."

A disclaimer in a code does not change that I guess ...

Answer 4

A) To what extent does "being responsible for one's own content" mean that one is responsible for what someone else is doing with your content?

B) As you stated, I think it is important to make clear that the intention is cyber security and not cyber crime. Which leads me to another issue on sololearn: How should we proceed with users who openly ask for hacking instructions or ready-made codes for hacking? (BroFar ? Fox ?)
We have that regularly on Q&A and no – they do not seem to mean "ethical hacking" or "cyber security"...

Answer 5

Vachila64☕ I don't think it is restricted to the concern of doing something ***on SL***. 🤔

And sure, any Python user with experience similar to Kode Krasher could put this code together to do whatsoever... (which isn't a valid ethical or juridical argument of course)

Answer 6

Not familiar with the socket library, but yeah, this is kind of a tough question
Cos like the code is helpful....yet not very safe (or worrying, idk how to put it, lol) from those who REALLY know python?

Hmmm, wonder why though, Is it that they could use this to do something on SL?

Answer 7

Lisa

If it's as bluntly & poorly put as that, they are to be reported to the moderators.

The goal is meant to be geared toward learning, not pretending to be some make-believe vigilante "hacker" that is seen in a movie.

Answer 8

Most of what I've learned coding and about the internet, before my network tech job with hands on experience, was books! Well, ebooks haha. I also printed out like 100's of pages of the Python docs before that. They have transferred many educational books to pdf and other readable formats so you could, for instance, use a small tablet as an infinity book. I got one of those cheap amazon fire devices exactly for this purpose.

These books Im talking about are gotten through free giveaways from packt, some are just straight up free, and mabye some torrents...but it's out there! Now just in a different format.

Answer 9

Yeah I've seen Bobbie's post. One of my books mentioned Owasp so I've messed around with those web apps before. And i just have directories full of different os iso files. So it's real fun to make a mini test lab with a bunch of different servers and client os. I prefer vbox as well!

Sadly, it's taken a spot on the backburner until I can figure out how to install Black Arch. I have got arch installed, but now I'd like to install the pentesting version. Thousands of tools

Kode Krasher
https://www.blackarch.org/downloads.html#blackarch-arm

Looks like you'd have to install arch arm and then give it an unofficial repository. Then you have your access to the tools

Answer 10

Kode Krasher oh didn't know that!

and also, i agree that we should not be liable when we say so and the (ab)user accepts that. if we did that and still the court holds us liable, what's the use of it? the state should allow harmful things to be used for educational purposes, while also not allowing it to be misused in the name of education. and it should do that while also not making innocent educators liable for a crime that the abuser themselves accepted to abuse at their own risk.

Answer 11

I've seen simple "hack" codes be reported by mods that know more than me about the rules, so I guess I don't know the rules on this subject, but IPs and ports are as public as google.com, so you don't get in trouble for KNOWING someone's IP or open/closed ports. Also some people have their site db and login info easily accessible with a google search (you know those "advanced" search query options? you can find a lot of things you technically shouldn't). The real problem is what they do with that information.
So it's the victim/host that's responsible for their stuff. If I see an unlocked car, am I bad? If I open and enter because I knew it's open then that's bad.

IP address and port scanning? OK it's up to the victim to keep those secure
Using that info to break in or DDoS? Now it's malicious.

I say just put a disclaimer and don't go overboard and especially don't hack something you don't have permission to.

And I also agree with ChillPill, nmap is rad 👍

Answer 12

I've made one as well. Nobody has even looked at it!!! Probably cause it's too long or nobody can find it in my sea of codes haha! Either way, not that many people will actually understand how to use it. And what to even do with the info obtained. Plus, port scanners are just the recon phase, not really anything too dangerous. Your handing something sharp enough to draw a little blood to people with no hands. They gotta really try if they're going to hurt themselves or someone else.

Answer 13

Kode Krasher That's why I said "it's up to the victim to be responsible for their stuff" you can hide readily public information but not everyone knows how to ;)

Answer 14

Slick
" It'd be revolutionary if EVERYTHING you needed to learn cybersec was all in one place. "

I believe that everybody has at least one $million idea during their life.

This could be yours

App -> Cybersec

Answer 15

Cybrary haha, the stopped sending me emails about their limited time offer about a year ago. Yeah, sadly lots of knowledge gets locked behind paywalls. But that doesn't mean we can't take some more time and find/learn guided materials like newer versions of CompTia series. Network+ especially. All that info is out there for free if ya know where to look, but it would be cool to have a central source of cybersec info for anybody willing to learn.

Answer 16

Kode Krasher i think adding a comment saying "i'm NOT liable for any misuse of this code, please use it at your own risk" should be enough?

Answer 17

Terence Murphy
Whenever you need information about a given library, you can check the documentation (and Google). But as you are a beginner – 1st do the very basics! :)

https://docs.python.org/3/howto/sockets.html
https://docs.python.org/3/library/socket.html

Answer 18

Yes, to get that spark of interest started. But when people think of hacking I'm not even sure what comes to mind. Bruteforce password crackers I think. And those programs mean just about nothing if you don't understand all the other outside pieces. You can scan your own network all day, check each ip you find to see if they have any popular ports open. Great. But then you'd have to go and learn 10 other things independently just to make one thing kinda click when viewing all the recon info. It'd be revolutionary if EVERYTHING you needed to learn cybersec was all in one place. But then, I can only assume that wouldn't help that much. Arguably the most important part, the recon, is searching info. If everything is in one place, then nobody would NEED to look for it, taking away a great oppertunity to do some recon of your own and find the info you're looking for. I see all of that as practice, and if someone isn't willing to try and find what they want to learn, then they won't do much regardless

Answer 19

Kode Krasher thanks in for ur thoughts bro 😄

Answer 20

Hello, Good Day Ladies And Gent,

My Opinion regards the Question on ground.

As Clearly stated by the developer, Kobe Krasher “For Educational Purpose” The Word in Quote is a disclaimer the programmer used to justify his self incase of any misconduct from the users.

He Shouldn’t be Guilty!

Thank You!
Happy Coding!❤️