Home About CTF Academy Contact
About the Team

The people behind Nexploit.

Two engineers building offensive security tooling, running live engagements, and designing every CTF from scratch.

Ayush Kumar
Founder · Security Engineer

Ayush Kumar

Founder of Nexploit and the person who ends up in every stack trace at 2 AM before a CTF launch. Ayush leads offensive engineering at Nexploit — penetration testing, exploit development, and building attack-chain challenges from the ground up. CCNA certified, self-taught through hundreds of hours on HackTheBox, and hooked on the moment a system finally gives up its root shell.

50+HTB Sherlocks Solved
CCNACertified
2+HackerOne Programs
4Original CTF Challenges

What I've hacked & built

A running log of engagements, disclosures, and challenges — real targets, real chains.

Bug Bounty

Whatnot — HackerOne

Authorized testing across the platform's GraphQL API for IDOR issues, plus XSS probing with Burp Suite.

Bug Bounty

Coinbase — HackerOne

Vulnerability research engagement against production targets under Coinbase's responsible disclosure program.

Responsible Disclosure

PW Vidyapeeth, Patna

Discovered network security exposures on-site and reported them through proper disclosure channels.

HackTheBox Machine

Hijacker

Built a full attack chain combining PHP type juggling with cron job log injection for privilege escalation.

HackTheBox Machine

Traveller

Machine built around a Joomla CVE (CVE-2023-23752) exploitation chain.

CTF Challenge

Ascent to Root

A multi-stage attack chain — from a web application foothold all the way to root on Linux.

CTF Challenge

Evil Corp Vault

A hard reverse-engineering challenge built around a custom bytecode VM with anti-debug protections.

CTF Challenge

Fsociety Mail Server

A web exploitation challenge chaining JWT "alg:none" forgery into server-side template injection.

CTF Challenge

Allsafe Login

An OSINT-meets-web hybrid challenge, themed around Mr. Robot's fictional security firm.

Akshay Anand
Founder · Cloud Engineer

Akshay Anand

Founder of Nexploit and the reason the platform stays up while Ayush is busy breaking things. Akshay owns the cloud infrastructure — deployments, uptime, and everything that keeps CTFd instances, subdomains, and SSL running without a hitch during live events — alongside the business side of Nexploit: partnerships, operations, and keeping the studio moving.

100%Uptime Focus
CloudInfra & Deployments
OpsBusiness & Partnerships

What Akshay runs

The infrastructure and business backbone that lets Nexploit ship on time.

Infrastructure

Cloud Deployment & Uptime

Manages the cloud environment powering Nexploit's CTF platform, keeping every event live and stable end to end.

Operations

Business & Partnerships

Handles the business side of Nexploit — partnerships, event logistics, and operations — so the technical team can focus on building.

Reliability

Event-Day Infrastructure

Ensures the platform holds up under load when hundreds of participants hit the CTF at once.

SK
CTO · IT Infrastructure & Security

Sahil Kumar

CTO at Nexploit, handling identity, network, and endpoint security across the platform. Background in enterprise IT support and MSP/MSSP environments — from Microsoft 365 and Active Directory to endpoint monitoring with SentinelOne and Splunk.

2+ yrsIT & Infra Experience
Top 5%TryHackMe Rooms
CertifiedCybersecurity - TuteDude
CEHComing Soon
SentinelOne (EDR) Splunk (SIEM) Burp Suite Metasploit Nmap Nessus Kali Linux Active Directory Microsoft Entra ID Microsoft 365 Intune Cisco Meraki RDP / VPN / DNS / DHCP Windows / MacOS

Where Sahil has worked

Hands-on IT support and infrastructure roles across MSP, hospitality, and enterprise environments.

L1 Support Engineer

Apnemy Technologies Pvt. Ltd.

Resolving global multi-channel helpdesk tickets within SLA, administering Microsoft 365 and Entra ID/Active Directory, and managing Cisco Meraki network infrastructure — VLANs, VPNs, and firewalls — alongside endpoint security monitoring via SentinelOne and Splunk.

Facility Management Engineer

Eastern Services

Delivered onsite IT support across 100+ endpoints, ran full-cycle user onboarding and OS upgrades with zero downtime, and maintained network infrastructure across Windows and MacOS environments.

Support Executive

Cyber Junction

Delivered onsite technical support and hardware troubleshooting, managed device provisioning and OS deployments, and ran e-procurement workflows on GeM and CPPP alongside statutory ESI/EPF compliance filings.

Want to work with us, or just say hi?

We're always up for a good security conversation — or a good CTF idea.

Get in touch →