Technique
technique:security_research_without_authorization
Also: grey-hat security research, vulnerability discovery
Testing public applications and websites for vulnerabilities without explicit authorization, followed by public disclosure or notification.
Testing public applications and websites for vulnerabilities without explicit authorization, followed by public disclosure or notification.
“I don’t have the authorization, the explicit authorization”
“I’m more grey hat in the community”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Elliot Alderson | Explicit | 49 |
Elliot Alderson USES security research without authorization
Elliot performs vulnerability research on applications without explicit authorization, describing himself as between a white hat and a grey hat.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“I don’t have the authorization, the explicit authorization to find these kinds of vulnerabilities.”
“You can consider me between the white hat and the grey hat”