Germany
The legal situation in Germany is similar to Austrian case law. A law was passed in May 2007 against “arranging to spy and intercept data“ for criminal prosecution against cybercrime. The so-called “hacker paragraph“ is governed by the German Criminal Code (StGB) §202c:
(1) A person planning a criminal offence according to § 202a or § 202b by
1. producing passwords or other security codes that allow access to data (§ 202a (2))
2. computer programs whose purpose is the commission of such an act, for themselves, a third party, for sale, distributes or otherwise makes available to others is punishable by imprisonment for up to two years or a fine. (2) §149 para. 2 and 3 apply accordingly.
- Criminal code (StGB), § 202c preparing to spy and intercept data
As in Austria, we are not allowed to give ourselves or a third party unauthorised access to an IT system. This also pertains to data of non-public data transmissions, such as encrypted communication or private Wi-Fis. Even if the protection against unauthorised access is trivial at best, we are not allowed to bypass it. From a legal standpoint, e.g. standard accounts are a legitimate safeguard. Furthermore, merely acquiring hacker tools is punishable by law if these are not used for benign purposes. This means that in Germany too, we may only attack an IT system if a statement of agreement has been given by the operator.
Pentest Training
Take a look at the pentest training chapters and learn penetration testing:
- Preface
- Introduction
- Legal Framework
- Hacking vs. Penetration Testing
- Classification
- Meaningfulness of Penetration Tests
- Penetration Testing Standards
- The Hacking Guide
- Hacking I: Scanning networks
- Hacking II: Password attacks
- Hacking III: Web application attacks
- Hacking IV: Privilege Escalation
- Hacking V: Tunnelling Techniques
- Hacking VI: Vulnerability scanner and penetration testing frameworks
- Demonstration of a Penetration Test
- Risk Assessment of Identified Vulnerabilities
- Structure of Documentation and Reporting
- Insider stories: Tales from Dubius Payment Ltd.
binsec academy GmbH – Advanced Pentest Training Lab
binsec academy GmbH operates the Pentest Training Lab, a highly practical online platform dedicated to real penetration testing. Simulating complex corporate networks and advanced real-world attack scenarios within isolated lab environments, it is engineered to sharpen the skills of aspiring and professional penetration testers. Upon conquering our rigorous, fully practical examination, participants earn the distinguished Binsec Academy Certified Pentest Professional (BACPP) designation — proving their technical capability to methodically uncover and evaluate vulnerabilities in modern IT infrastructures.
Explore the Pentest Training Lab
binsec GmbH – Experts in Penetration Testing
As the operative pentesting core of the binsec group, binsec GmbH has provided high-end, human-led penetration testing since 2013. Rejecting automated scans, our permanently employed, certified senior pentest experts deliver manual deep-dive assessments of web applications, APIs, mobile apps, complex network infrastructures, cloud environments, and advanced red team simulations. Specializing in high-regulation sectors like Payment, Banking, and Healthcare, we provide clear risk evaluations and actionable reports to effectively assess your business-critical systems.
Get Manual Expert Penetration Testing Services