Official Gatekeeper Writeup — My First Machine at TryHackMe

Introduction

Gatekeeper ( https://tryhackme.com/room/gatekeeper) is a combination buffer overflow exploitation and Meterpreter credential dump challenge.While I primarily utilize Ruby for my buffer overflow exploits, and have outline that method in this guide, users will be able to use any method they wish.I hope you enjoy this challenge and my first official offering on TryHackMe!

Scanning

The machine takes a couple of minutes to boot up, however most necessary ports will be available with a basic Nmap scan.

nmap 10.10.168.158

nmap -p 139,445,3389,31337 -A 10.10.168.158

Several ports are open and available, including SMB, RDP, and port 31337 “Elite.”Note that the service on this port is “Dostackbufferoverflowgood,” which is attributed in the user flag once access is gained, in accordance with the wishes of the…