Legal and Ethical Ground Rules

• Authorized testing only. Every technique in this course is practiced exclusively on the isolated Badger CTF platform provided for the class.
• The CFAA (Computer Fraud and Abuse Act) and related laws make unauthorized access a serious crime. Using these skills against systems you do not own or lack written permission for is illegal and grounds for dismissal.
• Academic integrity: submit your own work. Sharing full exploit solutions violates course policy; discussing concepts is encouraged.
• Responsible disclosure: if you ever find a real vulnerability, report it privately to the owner and give them time to fix it before any public discussion.