What class of hacker operates both offensively and defensively?

• A. White Hat
• B. Gray Hat
• C. Black Hat
• D. Script Kiddie

Answer: (B)

Gray hat hackers sit in the middle ground between ethical security work and illicit hacking. They might probe systems to uncover vulnerabilities without explicit permission, which involves offensive activity, but their underlying aim is often to improve security rather than cause harm. They may report findings to the owner or help fix issues, reflecting a defensive or beneficial intent, even though their actions aren’t fully authorized. This contrasts with white hats, who operate with explicit permission and strict ethical boundaries; black hats, who break the law for personal gain or harm; and script kiddies, who rely on ready-made tools with little understanding. The concept here is recognizing that some researchers act in a blended way—performing offensive activities to reveal weaknesses while also contributing to defense by informing and strengthening defenses.