Module 3 · Getting in legally Lesson 7 of 15
Labs and legal practice ranges
Practising on a system you do not own is a criminal offence in India under the IT Act and equivalent laws everywhere else — no exceptions for curiosity or for a course. Deliberately built practice ranges exist precisely so you never need to.
The concept
Practise where you are allowed to. Legally safe environments to learn on: TryHackMe and Hack The Box (guided and legal), OWASP Juice Shop and DVWA running on your own machine, and your own virtual machines. Read the rules of a capture-the-flag event before you start; they say exactly what is in scope.
Never test a website you do not own or have written permission to test, even with a harmless automated scanner — that is a criminal offence in most countries regardless of intent. Universities and employers do give written permission for specific ranges and times; get it in writing, and stay inside it.
Practice only where you are ALLOWED to:
TryHackMe . Hack The Box . PortSwigger Web Security Academy
OWASP Juice Shop (run it locally) . your own VMs
Never test a site you do not own or have written permission to test.
Keep a lab notebook - that notebook becomes your portfolio.Common mistakes
The mistake is running a vulnerability scanner against a college portal, a friend's site or a company that has not asked you to. Curiosity is not a defence, and a fresher with a police complaint has no career to protect.
Worked example
Free and low-cost ranges give you vulnerable machines to attack with permission, with scoreboards and community support. Every skill in this course can be practised on them, and none of it requires touching somebody else's system.
Your practice task
Create an account on one practice range, complete an introductory machine and save the walkthrough you wrote.
Do this before moving on. Reading a solution teaches the shape of it; typing it teaches you.
Key takeaway
Practise where you are allowed to.
Keep your place in this course
A free account saves which lessons you have finished and unlocks the certificate. The lesson itself stays free to read.
Create free account or sign inCourse complete
You finished every lesson.
Your certificate is ready, and the projects you built are the proof to attach to an application.
Almost there
15 lessons left of 15
Finish every lesson to unlock the certificate. Each one ends in a practice task — do them and the final project brief writes itself.