‘All I Need Is a Fair Chance’: IIT Aspirant Hacks Website After Admission Rejection

A student's desperate attempt to prove his cybersecurity skills after being denied admission to the Indian Institute of Technology (IIT) Kanpur's Bachelor of Cyber Security programme has taken an unexpected turn, with the institute now considering giving him a second opportunity instead of pursuing legal action.

The incident came to light after the student claimed on social media that he had gained access to sections of the official websites of IIT Kanpur and IIT Madras. He also shared screenshots of the alleged breach on X and Reddit, insisting that his intention was not to damage the systems but to showcase his technical abilities. The message allegedly left on the IIT Kanpur website read, "Site is hacked. All I need is just a fair chance."

According to the student's account, he had completed the admission process by paying the application fee, submitting all required documents and providing proof of his cybersecurity projects. However, he was not shortlisted and therefore could not participate in the hackathon, which formed a crucial stage of the selection process.

Speaking on the matter, IIT Kanpur Director Manindra Agrawal said the applicant was not shortlisted because he lacked prior experience in cybersecurity. Since admissions for the current academic year have already concluded, the institute cannot offer him a seat immediately. However, IIT Kanpur plans to invite the student to campus for a technical skills assessment. If he demonstrates the required competence, he could be considered during the next admission cycle.

Agrawal also confirmed that the student had managed to access certain sections of the institute's websites. Senior faculty members and technical experts have been asked to interact with him and explain that unauthorized access to computer systems is illegal and must never be repeated, regardless of intent.

An institute official said IIT Kanpur had initially considered filing an FIR but decided to first verify the student's claims and evaluate his abilities before taking any legal action. The official added that the institute has previously encouraged young cybersecurity talent, including offering an opportunity at C3iHub to a youth who had identified vulnerabilities in the CBSE's online evaluation portal.

The unusual case has sparked a wider debate on whether exceptional cybersecurity talent should be nurtured while ensuring that ethical boundaries and the law are respected, highlighting the thin line between ethical hacking and cybercrime.