# Using cookies to hack into a tech college's admission system

DevFeed: [Using cookies to hack into a tech college's admission system](<https://devfeed.tech/articles/using-cookies-to-hack-into-a-tech-college-s-admission-system-32620.md>)

Original publisher: [Read original article](<https://eaton-works.com/2026/03/09/skcet-hack/>)

Author: Eaton

Published: 2026-03-09T13:41:25Z

Content type: article

Language: en

Sources: [Eaton Works Feed](<https://devfeed.tech/sources/eaton-works-feed.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Web app](<https://devfeed.tech/topics/webapp.md>), [API](<https://devfeed.tech/topics/api.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [HTTP](<https://devfeed.tech/topics/http.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [cookies](<https://devfeed.tech/tags/cookies.md>), [data](<https://devfeed.tech/tags/data.md>), [http](<https://devfeed.tech/tags/http.md>), [india](<https://devfeed.tech/tags/india.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [web](<https://devfeed.tech/tags/web.md>), [web-app](<https://devfeed.tech/tags/web-app.md>)

## AI overview

The article describes how missing authentication on SKCET's admission APIs allowed manual cookie manipulation to bypass login and impersonate an admission officer. By discovering an officer GUID through student searches, the author accessed reports containing sensitive information about 4,110 students, including contact, address, Aadhaar, medical, demographic, academic, and income data.

## Source excerpt

The Sri Krishna College of Engineering and Technology (SKCET) in India made elementary mistakes in web app security.