Rejected by IIT Kanpur, student hacks two IIT websites; gets second chance to prove his skills

KANPUR: Denied admission to a newly launched cybersecurity program at the Indian Institute of Technology (IIT) Kanpur, an aspiring student hacked the official websites of both IIT Kanpur and IIT Madras. Instead of facing standard legal action, IIT Kanpur has offered the student a second chance at admission.

The incident gained widespread attention after the student detailed the exploit in a post on the social media platform Reddit, accompanied by screenshots of the hacked interface. According to the student, the breach was executed to prove his technical competence after he was left off the shortlist despite paying fees and uploading documents verifying his educational qualifications and technical skills. He stated that the exclusion prevented him from participating in a hackathon, prompting the breach.

Following the intrusion, a message reading "Site hacked. I just want a fair chance" was left on the IIT Kanpur website.

IIT Kanpur Director Manindra Agrawal stated that the student was omitted from the shortlist because he lacked prior formal knowledge in cybersecurity. Regarding the institute's response, Agrawal said that admissions procedures for the current year have already concluded, but the student will be summoned to the institute to test his technical proficiency through an examination. If the candidate proves his capabilities, he will be considered for the subsequent admission cycle.

Although authorities initially considered filing a formal complaint, the institute ultimately opted to test the student's skills. Earlier this year, a similar opportunity was extended to an individual who pointed out vulnerabilities in the C3iHub after identifying flaws in the CBSE online screen marking portal.