Hello there! I'm Arek (Arqsz) 👋

Penetration Tester | Security Researcher | Bug Bounty Hunter

About me

I am a Security Researcher based in Poland, with a deep focus on Offensive Security and AppSec.

I specialize in penetration testing, developing custom offensive tools, breaking complex systems and thinking like an adversary to secure infrastructure (basically red teaming). I am also the co-founder of White Hats SC at WUST 💹

• Core Specialization - Offensive Security Research, AppSec and Red Teaming.
• 🛠️ Tooling - I develop offensive tools and automations.
• 🔭 Current Focus - AppSec, Bug Bounty & Offensive Tool Development.
• 💻 Tech Stack - Python, Bash, Golang and JavaScript.
• Archives - I maintain forks of cool projects over at arqsz-mirrors.

I also sometimes write articles about my research or just some of my ideas on arqsz.net.

📱 Where to find me

📫 Let's connect

If you want to collaborate on a cybersec project or just say hi:

• DM me at Twitter/X
• send an email to me directly

🔧 Projects

Here are some project I work on or participate in:

• JSRecon-Buddy - Web recon chrome/firefox extensions.
• ct-hulhu - Certificate Transparency monitoring tool.
• tenant-domains - check_mdi replacement.
• bashdog - Bash documenting utility.
• interactsh-collaborator-rev - Interactsh collaborator - revised.
• interactsh-server-docker - Dockerized interactsh server.
• domainspotter - Certspotter automation script.
• gcheck - Google/Firebase credentials validator.
• BurpSuite-Gitleaks-Extension - Gitleaks integration for BurpSuite.
• BurpSuite-Just-Header-Injector - Header injection extension for BurpSuite.
• csp-evaluator-burp - CSP policy evaluator for BurpSuite.
• spaceship-ip - Spaceship prompt IP module.

Repository updated at Tue Sep 1 04:08:15 UTC 2026