16-year-old India student cracks NASA website flaw, wins spot in Hall of Fame

Starting his ethical hacking journey in Class 6 through self-learning, Yuvraj Gupta’s talent was recognized in 2024 by a cybersecurity expert, enabling him to train police officers—despite financial hardships, his family’s support helped him pursue his passion with a laptop

A 16-year-old student from Kanpur has earned international recognition after identifying a critical security flaw on NASA’s official website. Yuvraj Gupta, a Class 11 student at Saraswati Vidya Mandir Inter College, Damodar Nagar, was honoured by NASA with a letter of appreciation and induction into its prestigious Hall of Fame.

The vulnerability, if exploited, could have allowed attackers to send fake emails using NASA’s official domain—an oversight that had gone undetected even by professional cybersecurity experts. Yuvraj discovered the flaw during his participation in NASA’s bug bounty programme, which encourages ethical hackers worldwide to report security weaknesses in their digital infrastructure.

“After two weeks of trying, I was about to give up,” said Yuvraj. “But one night, I finally spotted the flaw in one of NASA’s subdomains. I documented everything, created a proof-of-concept video, and submitted the report.”

A self-taught prodigy

Yuvraj’s journey in ethical hacking began in Class 6, driven by curiosity and a self-taught approach through online tutorials and books. In 2024, his talent was noticed by a cybersecurity expert on social media, opening the door for him to train law enforcement personnel across India in cybercrime awareness.

Despite limited resources and financial challenges, Yuvraj’s family remained supportive. With funds pooled from his father’s savings and his sister’s scholarship, he was able to buy a laptop to further his learning.

While he has now gained global recognition, Yuvraj noted the absence of support from local or national government authorities. He has also reported security flaws in government websites of Odisha and Maharashtra but has yet to receive a response.

Currently residing in Naubasta, Kanpur, with his parents and two sisters, Yuvraj continues to pursue his passion for cybersecurity. He hopes his achievements will inspire other young talents and prompt more institutional encouragement for budding ethical hackers across India.