https://tatos.net/Escape from ShellOffensive security, penetration testing, red teaming, and raw notes from the field. 2026-09-24T21:40:53+00:00 Tato https://tatos.net/ Jekyll © 2026 Tato /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png CVE-2026-18963 - Keycloak reset-credentials bypass → full account takeover2026-09-21T08:00:00+00:00 2026-09-23T22:39:23+00:00 https://tatos.net/posts/cve-2026-18963-keycloak-reset-credentials-bypass/ Tato Unauthenticated full account takeover in Keycloak's reset-credentials flow (CVE-2026-18963, CVSS 9.1) - a sticky form-flag defect chained with an action-token check that never verifies the email link. Manual walkthrough plus a patched control. Patching vulnerable dependencies in Go with govulncheck — without breaking CI/CD2026-06-11T10:00:00+00:00 2026-09-24T21:23:32+00:00 https://tatos.net/posts/golang-patching/ Tato A practical guide to patching vulnerabilities in Go modules, covering different scenarios and utilizing Go-native tooling like govulncheck. THM Interceptor - Writeup2026-05-09T12:19:00+00:00 2026-09-21T13:33:39+00:00 https://tatos.net/posts/ctf/thm-interceptor-writeup/ Tato A walkthrough of the Interceptor TryHackMe room covering the exploitation of an internal media management portal by analyzing and manipulating HTTP traffic. Audiobook: Escape to the Andes2026-05-05T11:41:00+00:00 2026-09-21T13:33:39+00:00 https://tatos.net/posts/personal/audiobook-escape-to-the-andes/ Tato A book about how Maurice Hoschild facilitated the refuge of thousands of Jewish families in Bolivia, when most of the world was closing its borders. THM Masquerade - Writeup2026-04-20T09:59:00+00:00 2026-09-21T13:33:39+00:00 https://tatos.net/posts/ctf/thm-masquerade/ Tato A walkthrough of the Masquerade TryHackMe room covering forensics analysis of an attack with obfuscated PowerShell and TrevorC2 C2 framework.