In Germany, even the act of writing[1] software whose purpose is to access data without authorization[2] or intercept data transmissions intended for someone else[3] is a felony.

[1] https://dejure.org/gesetze/StGB/202c.html

[2] https://dejure.org/gesetze/StGB/202a.html

[3] https://dejure.org/gesetze/StGB/202b.html