solst/ICE of Astarte

@IceSolst • 31,384 subscribers

Voidweaver @AstarteSecurity - Pentester turned seceng turned meeting canceller - meetup https://t.co/E4rlINC0U6 - conf tracker https://t.co/tReNhuhANF

Live Cam

solst/ICE of Astarte

Shorts

🚨I HAVE LEAKED EVERY SINGLE PASSWORD EVER (4 to 32 chars long)! That is 347 novemdecillion passwords, the largest password leak ever! ALL of your passwords are in here, GUARANTEED! This is a client-side app, so what you search for is all local, never sent anywhere.

Sensitive content

I have leaked every single SSN into a public searchable list (in case you are looking for one). Your SSN is in here too, 100% guaranteed. Forgot your SSN? Need a new one? Use this tool!

NEW TOOL: Chirp Uses sound to transfer data between machines. Details and link below.

Adding an in-malware shop to buy upgrades Suggestions for items?

Building a harness to run scans with an agent. It is absolutely garbage. Completely useless. There’s literally 0 benefit to using it over plain Claude Code. Everything it can do, you can just do via Skills etc. Many were preaching the benefits of a harness, but I’m not sure.

🤡 Introducing OpenClown 🦀⚡️Rust, Blazing Fast 🔐Bitcoin Style Encryption 🤤Skills (backdoors) 🧠 Our Most Agent Yet 🦞Lobster

THEY MADE A WORM IN C&amp;C GENRALS Insane blog post by Bryan Alexander from Atredis Partners, presented at the DistrictCon junkyard

Videos

Watch Anya Live

I "ported" hashcat as a World of Warcraft addon (SHA256 implementation in LUA) It's around 6x faster than the GBA and 50x faster than the kindle. Could this be the ultimate password cracking rig ever made?

I wrote Task Unmanager: keeps killing processes Russian Roulette style, until your machine crashes

NEW TOOL: ITOA (Image to ASCII) Convert your images to an ASCII canvas, monochrome or colored, and save them into a separate image. Works on mobile (but large size is more limited than on desktop).

LiteLLM hack summary: What is it, why it's smart to target it, and how it happened (so far)

Pentest tools tier list: learn about which tools are actually used in pentests, and why, with Andy Swift Please comment why you disagree and what we've missed!! The three S-tier tools have a shared attribute: They only do ONE thing, but do it really well and reliably

What Half-Life's resonance cascade incident taught me about "AI Security"

I got to nerd out with haroon meer (!!). Thinkst to me has always been the golden standard of how a security company should feel like.

1-minute summary of the Claude security-review bypass

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:

Uploaded two “youtube videos”: - first covers CRXaminer and browser extensions hacks - second is a conversation with tuckner on the same topics (he knows a lot) - links below (separate less shitposty account) - click subscribe on “youtube”

Full episode below with Tib3rius Everything you've wanted to know about web app pentests

Here is the demo of SBOM-Tools by the OG legend Alex Matrosov (IQ 999999)

The lamest CVE of all time caused by the lamest product feature of all time. Full video with demo below.

THEY MADE A WORM IN C&C GENRALS Insane blog post by Bryan Alexander from Atredis Partners, presented at the DistrictCon junkyard