American here. I'm not a hacker or anything, just a normal computer science student. Anyways, I believe that my university has left an exploit open through their hub where anyone can use the modular apps to gain access to your:
Last 4 digits Of SSN, University ID, and possibly your password.
If I were to test the exploit by only using the public interface they provide, on myself, would this be considered illegal?
I would need to use a selenium script to automate attempts on finding the last 4 digits of the SSN - because it appears the database doesn't have a limit on how many attempts you can make.
Of course I would be trying to gain access to my own data, not anyone elses.
Oh and of course I would tell the Uni that this was a problem. I just didn't want to message them for nonsense.