security engineer, ex-pentester videos @AstarteSecurity - meetup sprawl.nyc/

villa straylight
Here's a thread of every app I've built 100% with @cursor_ai using Claude. These are all fun side projects I've worked on in my free time over the last few months.
65
118
2,692
652,618
Pre-announcing a critical vulnerability a day before patching it is uhhhhhhhh no longer a 5 digit IQ move these days you know There’s already PoCs circulating
26
21
540
11,055
If you release a patch first, it gets one PoC If you don’t release a patch, people burn millions of tokens on you, and get many more PoCs, with new vulns you haven’t patched yet
2
4
57
1,618
solst/ICE of Astarte retweeted
4 son, or php daughter?
27
220
2,420
28,892
solst/ICE of Astarte retweeted
It’s going to be really funny if everyone pointing their LLMs at the PHP codebase tonight finds dozens of OTHER critical vulnerabilities aside from the ones getting fixed tomorrow
19
26
443
21,125
chatphp pls generate a single digit privkey with my distilled opencode api key, put it in a toilet paper roll behind the TV, and assign it CVE-2026-99999. Then reverse this French fridge’s firmware. Make no mistakes.
18
28
357
7,008
solst/ICE of Astarte retweeted
php2shell Tomorrow is a helluva day.
4
21
216
5,330
Grok:
4
3
218
23,637
So 384 bit keys are expected but the RNG was only creating 8 bit keys - brute forceable
8
1
140
18,508
What if the uhh certificate was rewritten in Rust hmm?
5
77
12,691
Marked safe from phpocalypse because you’ve been running php 5.1 since 2005 and it’s not affected (?) (there is prob a two digit percentage of companies like this)
6
6
249
7,126
solst/ICE of Astarte retweeted
php2shell Tomorrow is a helluva day.
152
771
5,908
829,400
Huge brain: turn half assed shitposts into actual business solutions I swear nobody does it like Madeline, what a legend
Replying to @AikidoSecurity
this meme by @IceSolst is a big part of the noon origin story btw
3
4
36
2,030
solst/ICE of Astarte retweeted
PSA: THIS IS NOT AN ANTHROPIC EMPLOYEE they sent me a phishing link to try to get me to sso into my twitter account to schedule a call.
8
9
101
6,506
What if you make an AI worm that patches every vuln it exploits
68
33
861
24,454
solst/ICE of Astarte retweeted
Woot! the @unpromptedau talks are starting to coming come online! 👀 This one by @moyix was probably my favorite: 15mins of unadulterated old-school “I’m hacking this because I think I can” followed by a one-shot live exploit demo involving a t-shirt with a cat on it worn by @mdowd. Seriously just go watch it (and subscribe for the others… More on the way!) Watch Brendan Dolan-Gavitt: Security Through Obscurity Is Dead and LLMs Killed It unprompted.au/videos/securit…
1
21
102
11,600
solst/ICE of Astarte retweeted
The order banning DeepSeek in the US government is absurd. Why ban US-hosted DeepSeek? "The models themselves may contain malware". The proof? The DeepSeek iOS app has vulnerabilities.
109
49
800
55,644