// offensive security · penetration testing · research
Tyler Vaughan
Cybersecurity Portfolio
Welcome. I'm Tyler. I am an aspiring cybersecurity professional. This site is where I keep an evolving record of what I've worked on.
Recent writeups
all writeups →HTB: Sandworm — SSTI to Root via Rust Crate Hijacking
A walkthrough of HackTheBox Sandworm, demonstrating a PGP-based SSTI foothold, lateral movement through Rust crate hijacking, and privilege escalation via CVE-2022-31214 in Firejail.
HTB: Forest — AS-REP Roasting to Domain Admin
A walkthrough of HackTheBox Forest, demonstrating an AS-REP roast → BloodHound → DCSync attack chain on a misconfigured Active Directory environment.