
solst/ICE of Astarte
@IceSolst • 30,603 subscribers
Voidweaver @AstarteSecurity - Pentester turned seceng turned meeting canceller - meetup https://t.co/E4rlINC0U6 - conf tracker https://t.co/tReNhuhANF
Shorts
Videos

I wrote Task Unmanager: keeps killing processes Russian Roulette style, until your machine crashes
solst/ICE of Astarte1,800,910 views • 4 months ago

LiteLLM hack summary: What is it, why it's smart to target it, and how it happened (so far)
solst/ICE of Astarte154,947 views • 2 months ago

Pentest tools tier list: learn about which tools are actually used in pentests, and why, with Andy Swift Please comment why you disagree and what we've missed!! The three S-tier tools have a shared attribute: They only do ONE thing, but do it really well and reliably
solst/ICE of Astarte45,063 views • 2 months ago

NEW TOOL: It's a fully in-browser binary/file analysis tool with a hex editor. Features: - Hex editor and you can save the edited file - Mach-O symbols - ELF and PE basic metadata - Zip file contents - Fully client-side in-browser, so it is private and the files are never sent anywhere This is meant as a basic and quick tool to check simple metadata and do hex edits. If you need something more robust for malware analysis consider other tools like Malcore™ aka Malcore.io™ or just use a cli/native tool. Shoutout to Battle Programmer Yuu for inspiring me to use Unifont that I stole from tmp.0ut (it looks so good!) The code is all generated by Claude in Cursor and hosted on Github Pages. I don't really do any binary analysis, so if you have suggestions for improvements, let me know. (this is technically 'early access' and i haven't tested it too much)
solst/ICE of Astarte142,543 views • 1 year ago

1-minute summary of the Claude security-review bypass
solst/ICE of Astarte39,557 views • 3 months ago

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:
solst/ICE of Astarte33,940 views • 3 months ago

Spicy take: SOC the hardest security job, given industry expectations. Also IMO external SOCs are useless: You just get alerted twice, once by your tools, and another by the external SOC, just forwarding the alert with no extra context. What do you think? Check out the latest video with spencer on pentesting Active Directory
solst/ICE of Astarte24,306 views • 3 months ago

Full episode below with Tib3rius Everything you've wanted to know about web app pentests
solst/ICE of Astarte20,590 views • 3 months ago

Here is the demo of SBOM-Tools by the OG legend Alex Matrosov (IQ 999999)
solst/ICE of Astarte18,035 views • 3 months ago
No more content to load