Safe and Legal Practice
Cybersecurity practice must be controlled, lawful and explicitly authorized.
Cybersecurity practice must be controlled, lawful and explicitly authorized.
Allowed scope
- Your own Android device and Termux environment.
- The sample files and local services supplied by this academy.
- Accounts, applications or targets for which you have clear permission.
- Purpose-built training platforms that explicitly allow the exercise.
Out of scope
Do not scan, exploit, intercept, guess passwords for or disrupt third-party websites, public addresses, Wi-Fi networks, accounts or devices. Public accessibility is not authorization.
Termux lab safety
- Keep academy files under
$HOMEand personal Android files outside the lab. - Grant shared-storage access only when a lesson requires it.
- Read scripts before execution and avoid commands copied from unknown sources.
- Bind training services to
127.0.0.1unless the lesson defines a trusted local scope. - Do not use root, unrestricted automation or real credentials.
- Back up source files and verify hashes before analysis.
Portable challenges
The included challenge programs use Termux-compatible shell or Python files. They do not create system users or install into privileged desktop paths.