=##############################################=
    +@+::::::::::::::::::::::::::::::::::::::::::*@+
    +@= :++++++++++++=--:......::--=+++++++++++. +@+
    +@= -@@@@@@%*+-:.               .:=*%@@@@@@- +@+
    +@= -@@@#+:                          .=#@@@: +@+
    +@= -@#-                                -#@: +@+
    +@= -+                                    +: +@+
    +@=                                          +@+
    +@= :=:                                  .-. +@+
    +@= -@@= .-+**#%#*=.        .=*#%#**+-. =@%. +@+
    +@= :#@#:#+-. .=#@@%*=.  :=*%@@#=. .-+#:*@#. +@+
    +@= :#%#.        :+%@@*  *@@%+.        .#%*. +@+
    +@= -+: .+.  .-==-. --    -- .-==-.  :+  :+. +@+
    +@=     -#  +@@@@@@+  :  :  *@@@@@@=  #:     +@+
    +@=      ..=**++*#%=  *. +: +%#*++**-..      +@+
    +@=       ..      .::==  :+-:.      ..       +@+
    +@=    .=*         ==      :+         *=.    +@+
    +@=   -%@+        .+:      :*:        +@%-   +@+
    +@=  .%@@%-...:=*#%%@#-.:+%@@%#*=:...=%@@%   +@+
    +@=  :@@@@@@%@@@@@@@@@@%@@@@@@@@@@%%@@@@@%   +@+
    +@= --+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@%:-: +@+
    +@= =@*-+*#%%%%%%%%##%%%%%%**%%@%%%%%#*+.+@- +@+
    +@= =@@*       .*%%###******#%@#:       *@@- +@+
    +@= =@@@=        :*%@@@@@@@@%*-        -@@@- +@+
    +@= =@@@*           .--==-:.           #@@@- +@+
    +@= =@@@%:                            :@@@@- +@+
    +@= =@@@@%-                          :%@@@@- +@+
    +@= =@@@@@@*.                      .+%@@@@@- +@+
    +@= =@@@@@@@@*:                  :*@@@@@@@@- +@+
    +@= :+=======+=:                :=+=======+. +@+
    *@*------------------------------------------#@+
    -++++++++++++++++++++++++++++++++++++++++++++++-

keyboard shortcuts

press ESC or click outside to close
kali linux · pentester in progress · access node open

WE ARE FSOCIETY break · learn · secure

Not a stunt. A field log from a 4th-year CS engineer learning offensive security the hard way — real labs, real tooling, real notes. Everything here is built to teach, in a lab you own, with permission you were given.

▸ open the roadmap read tutorials open toolbox
0
tools configured
0
years in
0
labs cleared
0
internships
armanxploits@fsociety:~
$
// 01

whoami

AX
Arman Ahemad Khan
@armanxploits

4th-year engineering student running a Kali fsociety box, currently in cybersecurity internships and building toward ethical hacking and penetration testing. Self-directed, hands-on, allergic to copy-paste learning.

Kali LinuxBurp ProMetasploit Aircrack-ngNmapBettercap
current focus
Web App Pentesting OWASP · PortSwigger
Network Attacks MitM · spoofing
WiFi / Wireless WPA2 capture
Exploitation Metasploit
OSINT & Recon footprinting
fsociety box // specs
machineASUS TUF F16
osKali Xfce + Win11
shellzsh · p10k
wirelessRTL8852BE
burpPro · Java 21
mcpmsf · aircrack
// 02

the path

An attack chain for a career, not a target. Seven phases from recon to operator. Tap any node for a dossier — what it is, why it matters, and where to learn it. Pass the knowledge check to clear a node; your clearance level climbs. Progress is saved in your browser.

clearance level0%
// 03

tutorials

Step-by-step practical walkthroughs — recon to exploitation — built from lab sessions and CTF experience. Every tutorial includes real commands, scope warnings, and the thinking behind each step.

// 04

arsenal

// 05

toolbox

Live browser tools — no install needed. Encode payloads, identify hashes, look up CVEs, test regex patterns, and reference common port intel.

⌘

Payload Encoder

live
// waiting for input
#

Hash Identifier

live
// paste a hash above
Identified by length & format. For cracking: use Hashcat -m flag matching type.
⚡

CVE Lookup

local db
Local DB of critical CVEs. For full details → nvd.nist.gov
.*

Regex Tester

live
// type pattern above
◈

Common Ports — Pentest Reference

static ref
// 06

spot the vulnerability

Real (simplified) code snippets, one planted flaw each. Pick the vulnerability class, get the reasoning — then hit next and go again.

— challenge 1 / 12 
// loading…
which vulnerability class is this?
0/0 correct
// 07

attack tree

Interactive top-down attack chains — recon to impact. Click any node to inspect, switch scenarios left.

// 08

journey

2021

The Beginning

Caught the bug. Started with networking fundamentals — OSI, TCP/IP, ARP, DNS — and a first Kali dual-boot.

NetworkingKali
2022

Tools & CTF Foundations

Installed the core kit: SecLists, tmux, Obsidian. Solved Google's XSS Game. Dissected ARP packet structure by hand.

CTFXSSSecLists
2023

MitM & Wireless

Learned MitM with Bettercap, ARP/DNS spoofing, WPA2 handshake capture. Started the ethical-hacking-notes repo.

BettercapWPA2Aircrack-ng
2024 early

Full Kali + Burp Pro

Fresh dual-boot on the ASUS TUF F16. Fought GRUB, TLP, clock sync. Bought Burp Suite Pro, set up Java 21, started PortSwigger labs.

Burp ProPortSwigger
2024 late

Knowledge Vault

Built a cross-linked Obsidian vault: OSI, ARP, firewalls, Wireshark, DNS. Delivered an internship talk on WannaCry & the Sony breach.

ObsidianWannaCry
2025 — NOW

Internship + MCP

Summer cybersecurity internship. Wired Metasploit MCP and Aircrack MCP into the fsociety box. Running recon against lab targets, taming the RTL8852BE driver.

Metasploit MCPInternship
// 09

field notes

Methodology notes from labs I own and engagements I'm authorised on. High-level technique, not a how-to-attack-strangers manual — that's the whole difference between a pentester and a problem.

// 10

proving ground

PortSwigger

Web Security Academy

Primary web-app range. Working XSS, SQLi, SSRF, IDOR and auth-bypass labs.

35% clearedopen ▸
Google

XSS Game

All 6 levels down, including the DOM-based level via a data: URI bypass.

6/6 ✓open ▸
TryHackMe

Learning Paths

Beginner→intermediate rooms: networking, Linux, web fundamentals.

in progressopen ▸
HackTheBox

Starting Point

Practical machine hacking — building real exploitation reps from the ground up.

just startedopen ▸
// 11

repos

~/ my repos
armanxploits / ethical-hacking-notes
Personal methodology — MitM, ARP/DNS spoofing, WPA2 capture, Nmap host discovery. Clean Markdown.
Markdownpersonal
arman080325 / fsociety-web
This site — the fsociety hub. Field notes, arsenal, tutorials, toolbox, and the interactive roadmap.
HTML/CSS/JSpersonal
arman080325 / Network-packet-analyzer
A simple network packet analyzer built with Python.
Pythonpersonal
+ next repo
Dropping new repos here
$ essential community repos
show all tools ↗
// 12

contact

let's connect.

Open to CTF teams, bug-bounty collabs, security research, and anything ethical-hacking related. Currently interning — say hi.

⬡ github.com/arman080325 ◈ linkedin / arman-ahemad-khan ◉ armanxploit@gmail.com
contact.sh
$ ping armanxploits
PING armanxploits — 56 bytes
64 bytes: icmp_seq=1 ttl=64 time=0.1ms
--- node is REACHABLE ---
$