gray hat
Morally ambiguous hacker
Gray hat refers to someone whose ethics fall between clearly good and clearly bad—most often a hacker who may break into systems without authorization but doesn't intend malicious harm, perhaps exposing security flaws or acting from curiosity rather than criminal intent.
The term borrows from Western film conventions where white hats were heroes and black hats villains.
Gray hat hackers sometimes notify companies of vulnerabilities after exploiting them.
Notable act or abuse
- vulnerabilityOpenness to harm
- penetration testingAuthorized security vulnerability assessment
- security researcherOne who finds system vulnerabilities
- bug bountyReward for finding vulnerabilities
disclosure · zero-day · backdoor · intrusion · proof of concept · ethical hacking · cracking · defacement
Harmful computer programs
- phishingFraudulent credential harvesting
- ransomwareHostage-taking code
- botnetRemotely controlled infected computers
- spywareHidden surveillance program
firewall · encryption · anonymity · DDoS · keylogger · rootkit · worm · cyberespionage
Right and wrong principles
- ambiguityOpenness to multiple interpretations
- dilemmaForced choice between undesirables
- questionableOf uncertain validity
- boundariesLines marking separation
intent · judgment · legality · conscience · justification · vigilante · ends and means · controversial
exploit
Notable act or abuse
- vulnerabilityOpenness to harm
- penetration testingAuthorized security vulnerability assessment
- security researcherOne who finds system vulnerabilities
bug bounty · disclosure · zero-day · backdoor · intrusion · proof of concept · ethical hacking · cracking · defacement · social engineering
malware
Harmful computer programs
- phishingFraudulent credential harvesting
- ransomwareHostage-taking code
- botnetRemotely controlled infected computers
spyware · firewall · encryption · anonymity · DDoS · keylogger · rootkit · worm · cyberespionage · attack vector
morality
Right and wrong principles
- ambiguityOpenness to multiple interpretations
- dilemmaForced choice between undesirables
- questionableOf uncertain validity
boundaries · intent · judgment · legality · conscience · justification · vigilante · ends and means · controversial · unauthorized
gray hatwhite hat
Ethical cybersecurity professional
black hat · cybercriminal · security researcher · cracker · red team
gray hatblack and white
Without middle ground
clear-cut · unambiguous · pure · absolute · unequivocal
gray hatblack and white
Without middle ground
clear-cut · unambiguous · principled · purist · absolutist
gray, grey, hat, hats, grays, greys, grayed, greyed, graying