solst/ICE of Astarte's banner
solst/ICE of Astarte's profile picture

solst/ICE of Astarte

@IceSolst • 31,997 subscribers

security engineer, ex-pentester videos @AstarteSecurity - meetup https://t.co/E4rlINC0U6

Shorts

🚨I HAVE LEAKED EVERY SINGLE PASSWORD EVER (4 to 32 chars long)! That is 347 novemdecillion passwords, the largest password leak ever! ALL of your passwords are in here, GUARANTEED! This is a client-side app, so what you search for is all local, never sent anywhere.

🚨I HAVE LEAKED EVERY SINGLE PASSWORD EVER (4 to 32 chars long)! That is 347 novemdecillion passwords, the largest password leak ever! ALL of your passwords are in here, GUARANTEED! This is a client-side app, so what you search for is all local, never sent anywhere.

5,446,820 views

I have leaked every single SSN into a public searchable list (in case you are looking for one). Your SSN is in here too, 100% guaranteed. Forgot your SSN? Need a new one? Use this tool!

Sensitive content

I have leaked every single SSN into a public searchable list (in case you are looking for one). Your SSN is in here too, 100% guaranteed. Forgot your SSN? Need a new one? Use this tool!

2,492,187 views

NEW TOOL: Chirp Uses sound to transfer data between machines. Details and link below.

NEW TOOL: Chirp Uses sound to transfer data between machines. Details and link below.

1,426,229 views

Adding an in-malware shop to buy upgrades Suggestions for items?

Adding an in-malware shop to buy upgrades Suggestions for items?

136,160 views

🤡 Introducing OpenClown 🦀⚡️Rust, Blazing Fast 🔐Bitcoin Style Encryption 🤤Skills (backdoors) 🧠 Our Most Agent Yet 🦞Lobster

🤡 Introducing OpenClown 🦀⚡️Rust, Blazing Fast 🔐Bitcoin Style Encryption 🤤Skills (backdoors) 🧠 Our Most Agent Yet 🦞Lobster

82,135 views

Building a harness to run scans with an agent. It is absolutely garbage. Completely useless. There’s literally 0 benefit to using it over plain Claude Code. Everything it can do, you can just do via Skills etc. Many were preaching the benefits of a harness, but I’m not sure.

Building a harness to run scans with an agent. It is absolutely garbage. Completely useless. There’s literally 0 benefit to using it over plain Claude Code. Everything it can do, you can just do via Skills etc. Many were preaching the benefits of a harness, but I’m not sure.

55,930 views

THEY MADE A WORM IN C&C GENRALS Insane blog post by Bryan Alexander from Atredis Partners, presented at the DistrictCon junkyard

THEY MADE A WORM IN C&C GENRALS Insane blog post by Bryan Alexander from Atredis Partners, presented at the DistrictCon junkyard

10,890 views

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

I wrote Task Unmanager: keeps killing processes Russian Roulette style, until your machine crashes
0:22
IceSolst's profile picture

I wrote Task Unmanager: keeps killing processes Russian Roulette style, until your machine crashes

solst/ICE of Astarte

2,053,604 views • 7 months ago

I know what you are thinking. GBA too colorful. Too many buttons. Need buttery smooth e-ink display instead for password cracking activities. I “ported” hashcat to the Kindle (jailbreaked), the ultimate password cracking rig (my dumbest project yet). It does maybe like 50 hashes per second? It invokes a sha256sum process for each line in the wordlist. Horrible. You can improve it, but imagine optimizing the kindle password cracker, what are you doing with your life.
0:28
IceSolst's profile picture

I know what you are thinking. GBA too colorful. Too many buttons. Need buttery smooth e-ink display instead for password cracking activities. I “ported” hashcat to the Kindle (jailbreaked), the ultimate password cracking rig (my dumbest project yet). It does maybe like 50 hashes per second? It invokes a sha256sum process for each line in the wordlist. Horrible. You can improve it, but imagine optimizing the kindle password cracker, what are you doing with your life.

solst/ICE of Astarte

161,253 views • 1 month ago

I "ported" hashcat to the GBA, the ultimate password cracking rig ever (my dumbest project yet). The monstrously powerful 16.78 MHz ARM7TDMI chip does an astronomical 727 SHA256 hashes per second!! which is about thirty million times slower than a modern cracking rig. 350 days of continuous cracking on this bad boy could be done in about 1 second with a modern GPU-accelerated cracking rig.
0:42
IceSolst's profile picture

I "ported" hashcat to the GBA, the ultimate password cracking rig ever (my dumbest project yet). The monstrously powerful 16.78 MHz ARM7TDMI chip does an astronomical 727 SHA256 hashes per second!! which is about thirty million times slower than a modern cracking rig. 350 days of continuous cracking on this bad boy could be done in about 1 second with a modern GPU-accelerated cracking rig.

solst/ICE of Astarte

132,658 views • 1 month ago

I "ported" hashcat as a World of Warcraft addon (SHA256 implementation in LUA) It's around 6x faster than the GBA and 50x faster than the kindle. Could this be the ultimate password cracking rig ever made?
0:23
IceSolst's profile picture

I "ported" hashcat as a World of Warcraft addon (SHA256 implementation in LUA) It's around 6x faster than the GBA and 50x faster than the kindle. Could this be the ultimate password cracking rig ever made?

solst/ICE of Astarte

117,144 views • 1 month ago

Use an LLM for free, fully offline in your browser, in a Linux sandbox with python etc. Your data isn't sent anywhere, no credit card required. This is smolbox, built by remy🐀 (six digit IQ) You can use it here: You can read about it here: Will upload the full episode to my YT channel prob this weekend:
3:50
IceSolst's profile picture

Use an LLM for free, fully offline in your browser, in a Linux sandbox with python etc. Your data isn't sent anywhere, no credit card required. This is smolbox, built by remy🐀 (six digit IQ) You can use it here: You can read about it here: Will upload the full episode to my YT channel prob this weekend:

solst/ICE of Astarte

28,317 views • 13 days ago

NEW TOOL: ITOA (Image to ASCII) Convert your images to an ASCII canvas, monochrome or colored, and save them into a separate image. Works on mobile (but large size is more limited than on desktop).
0:31
IceSolst's profile picture

NEW TOOL: ITOA (Image to ASCII) Convert your images to an ASCII canvas, monochrome or colored, and save them into a separate image. Works on mobile (but large size is more limited than on desktop).

solst/ICE of Astarte

983,925 views • 1 year ago

I don't give a shit about CVEs
5:56
IceSolst's profile picture

I don't give a shit about CVEs

solst/ICE of Astarte

49,913 views • 1 month ago

LiteLLM hack summary: What is it, why it's smart to target it, and how it happened (so far)
7:08
IceSolst's profile picture

LiteLLM hack summary: What is it, why it's smart to target it, and how it happened (so far)

solst/ICE of Astarte

155,988 views • 5 months ago

Pentest tools tier list: learn about which tools are actually used in pentests, and why, with Andy Swift Please comment why you disagree and what we've missed!! The three S-tier tools have a shared attribute: They only do ONE thing, but do it really well and reliably
2:17
IceSolst's profile picture

Pentest tools tier list: learn about which tools are actually used in pentests, and why, with Andy Swift Please comment why you disagree and what we've missed!! The three S-tier tools have a shared attribute: They only do ONE thing, but do it really well and reliably

solst/ICE of Astarte

49,126 views • 5 months ago

NEW TOOL: It's a fully in-browser binary/file analysis tool with a hex editor. Features: - Hex editor and you can save the edited file - Mach-O symbols - ELF and PE basic metadata - Zip file contents - Fully client-side in-browser, so it is private and the files are never sent anywhere This is meant as a basic and quick tool to check simple metadata and do hex edits. If you need something more robust for malware analysis consider other tools like Malcore™ aka Malcore.io™ or just use a cli/native tool. Shoutout to Battle Programmer Yuu for inspiring me to use Unifont that I stole from tmp.0ut (it looks so good!) The code is all generated by Claude in Cursor and hosted on Github Pages. I don't really do any binary analysis, so if you have suggestions for improvements, let me know. (this is technically 'early access' and i haven't tested it too much)
0:29
IceSolst's profile picture

NEW TOOL: It's a fully in-browser binary/file analysis tool with a hex editor. Features: - Hex editor and you can save the edited file - Mach-O symbols - ELF and PE basic metadata - Zip file contents - Fully client-side in-browser, so it is private and the files are never sent anywhere This is meant as a basic and quick tool to check simple metadata and do hex edits. If you need something more robust for malware analysis consider other tools like Malcore™ aka Malcore.io™ or just use a cli/native tool. Shoutout to Battle Programmer Yuu for inspiring me to use Unifont that I stole from tmp.0ut (it looks so good!) The code is all generated by Claude in Cursor and hosted on Github Pages. I don't really do any binary analysis, so if you have suggestions for improvements, let me know. (this is technically 'early access' and i haven't tested it too much)

solst/ICE of Astarte

143,621 views • 1 year ago

What Half-Life's resonance cascade incident taught me about "AI Security"
33:48
IceSolst's profile picture

What Half-Life's resonance cascade incident taught me about "AI Security"

solst/ICE of Astarte

44,971 views • 5 months ago

1-minute summary of the Claude security-review bypass
0:52
IceSolst's profile picture

1-minute summary of the Claude security-review bypass

solst/ICE of Astarte

40,040 views • 6 months ago

I got to nerd out with haroon meer (!!). Thinkst to me has always been the golden standard of how a security company should feel like.
1:05
IceSolst's profile picture

I got to nerd out with haroon meer (!!). Thinkst to me has always been the golden standard of how a security company should feel like.

solst/ICE of Astarte

35,642 views • 5 months ago

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:
0:42
IceSolst's profile picture

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:

solst/ICE of Astarte

33,940 views • 6 months ago

Uploaded two “youtube videos”: - first covers CRXaminer and browser extensions hacks - second is a conversation with tuckner on the same topics (he knows a lot) - links below (separate less shitposty account) - click subscribe on “youtube”
0:51
IceSolst's profile picture

Uploaded two “youtube videos”: - first covers CRXaminer and browser extensions hacks - second is a conversation with tuckner on the same topics (he knows a lot) - links below (separate less shitposty account) - click subscribe on “youtube”

solst/ICE of Astarte

28,001 views • 7 months ago

Spicy take: SOC the hardest security job, given industry expectations. Also IMO external SOCs are useless: You just get alerted twice, once by your tools, and another by the external SOC, just forwarding the alert with no extra context. What do you think? Check out the latest video with spencer on pentesting Active Directory
0:42
IceSolst's profile picture

Spicy take: SOC the hardest security job, given industry expectations. Also IMO external SOCs are useless: You just get alerted twice, once by your tools, and another by the external SOC, just forwarding the alert with no extra context. What do you think? Check out the latest video with spencer on pentesting Active Directory

solst/ICE of Astarte

24,497 views • 6 months ago

Full episode below with Tib3rius Everything you've wanted to know about web app pentests
0:29
IceSolst's profile picture

Full episode below with Tib3rius Everything you've wanted to know about web app pentests

solst/ICE of Astarte

20,590 views • 6 months ago

Here is the demo of SBOM-Tools by the OG legend Alex Matrosov (IQ 999999)
6:34
IceSolst's profile picture

Here is the demo of SBOM-Tools by the OG legend Alex Matrosov (IQ 999999)

solst/ICE of Astarte

18,035 views • 6 months ago

The lamest CVE of all time caused by the lamest product feature of all time. Full video with demo below.
1:29
IceSolst's profile picture

The lamest CVE of all time caused by the lamest product feature of all time. Full video with demo below.

solst/ICE of Astarte

11,742 views • 6 months ago

No more content to load