The most classic order line of the network - the killing skills of network security workers (repost)

xiaoxiao2021-03-06  57

Transfer from: CZ88.NET Pure Wein! The most classic command line of the network - the essential, most common, test physical network of network security workers

Ping 192.168.0.8 -t, parameter -t is waiting for the user to interrupt the test

2. View DNS, IP, Mac, etc.

A.WIN98: WiniPCFG

B.Win2000 or above: IPConfig / All

C.NSLOOKUP: See if DNS in Hebei

C: /> nslookup

Default Server: ns.hesjptt.net.cn

Address: 202.99.160.68

> Server 202.99.41.2 Change DNS to 41.2

> POP.PCPOP.COM

Server: ns.hesjptt.net.cn

Address: 202.99.160.68

Non-Authoritative Answer:

Name: pop.pcpop.com

Address: 202.99.160.212

3. Network letter

NET sent computer name / ip * (broadcast) transfer content, pay attention to not spanning

Net Stop Messenger stops the letter to make the service, you can also modify in panel-service

Net Start Messenger starts the letter of credits

4. Detect each other computer name, the group, domain, and the current username (the pursuit of working principle)

Ping -a ip -t, only display NetBIOS name

NBTSTAT -A 192.168.10.146 is relatively full

5.NetStat -a Shows all ports of your computer now open

NetStat -s -e is more detailed to display your network information, including TCP, UDP, ICMP, and IP statistics, etc.

6. Detect the ARP binding (dynamic and static) list, display all connected to my computer, display the other party IP and MAC address

ARP -A

7. On the proxy server

Bundle IP and MAC address, solve the IP of the local area network! :

ARP -S 192.168.10.59 00 -50-FF-6C-08-75

Release the iP and MAC address of the NIC:

ARP -D NIC IP

8. Hide your computer in the network neighbor

NET Config Server / Hidden: YES

NET Config Server / Hidden: No is open

9. Several net commands

A. Display the current Workgroup Server List Net View, when you use this command without an option, it displays a list of computers on the current domain or network.

For example: view shared resources on this IP, you can

C: /> Net View 192.168.10.8

Shared resources in 192.168.10.8

Resource shared name type use notes

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Website service Disk

The command successfully completed.

B. Check the user account list NET User on your computer

C. View Network Link Net Use

For example: NET use z: / 192.168.10.8/movie maps this IP's MOVIE shared directory to a local Z disk

D. Record Link Net Session

For example: C: /> Net session

Computer username customer type opens free time

-------------------------------------------------- -----------------------------

/ 192.168.10.110 Rome Windows 2000 2195 0 00: 03: 12 / 192.168.10.51 Rome Windows 2000 2195 0 00:00:39

The command successfully completed.

10. Routing Tracking Command

A.tracert pop.pcpop.com

B.Pathping pop.pcpop.com In addition to the display route, 325S analysis is provided, and the% of the lost package is calculated.

11. Several orders about sharing security

A. View your machine's shared resource NET Share

B. Manually delete sharing (you can make a BAT file, turn it on, delete the sharing!)

NET Share C $ / d

NET Share D $ / d

NET Share IPC $ / D

NET Share Admin $ / D

Note that there is a space behind it.

C. Add a sharing:

C: / Net Share mymovie = E: / Downloads / Movie / Users: 1

MyMovie shared success.

At the same time, the number of limited link users is 1 person.

12. Set static IP in DOS

A. Set static IP

Cmd

Netsh

Netsh> int

Interface> IP

Interface IP> Set Add Add "Static IP Address Mask Gateway

B. View IP settings

Interface IP> show address

ARP

Displays and modify the items in the Address Resolution Protocol (ARP) "cache. One or more tables are included in the ARP cache that stores the IP address and its resolved Ethernet or token ring physical address. Each Ethernet or token ring network adapter installed on a computer has its own separate table. If you use without parameters, the ARP command will display the help information.

grammar

Arp [-a [inetaddr] [-n ifceaddr]] [-g [inetaddr] [-n ifceaddr]] [-d inetaddr [ifaceddddddddddddr]] [-s inetaddr etheraddr [iFaceaddr]]

parameter

-A [inetaddr] [-ifceaddr]

Displays the current ARP cache table for all interfaces. To display the ARP cache item for the specified IP address, use the ARP -A with the inetaddr parameter, which is the INetAddr represents the specified IP address. To display the ARP cache table for the specified interface, use the -n ifceaddr parameter, which the IFACEADDR represents the IP address assigned to the specified interface. -N parameter is case sensitive.

-g [inetaddr] [-n ifceaddr]

The same as -a.

-d inetaddr [ifceaddr]

Delete the specified IP address item, which is the INetAddr represents the IP address. For a specified interface, you want to delete an item in the table, use the ifAceAddr parameter, where the IFACEADDR represents the IP address assigned to the interface. To delete all items, use an asterisk (*) wildcard instead of inetaddr.

-S inetaddr etheraddr [ifceaddr]

Adding an IP address inetaddr to the static item of the physical address EtherAddr to the ARP cache. To add a static ARP cache item to the specified interface, use the ifAceAddr parameter, where the IFACEAddr represents the IP address assigned to the interface.

Display help at the command prompt.

Comment

INETADDR and IFACEADDR's IP address is represented by a decimal number of decisions with a dot.

The physical address EtherAddr consists of six bytes, which are represented by hexadecimal notes and is separated by a linker (for example, 00-AA-00-4F-2 A-9C). The items added by the -s parameter belong to a static item, which will not timeout in the ARP cache. These items will be deleted if the TCP / IP protocol is terminated. To create a permanent static ARP cache item, use the appropriate ARP command in the batch file and run the batch file when starting through the Plan Task Program.

This command is only available when an internet protocol (TCP / IP) protocol is installed as components of the network adapter property in the network connection.

example

To display the ARP cache table for all interfaces, type:

ARP -A

For interfaces that the assigned IP address is 10.0.0.99, you want to display its ARP cache table, you can type:

ARP -A-N 10.0.0.99

To add a static ARP cache item parsing the IP address 10.0.0.80 into a physical address 00-AA-00-4F-2 A-9C, you can type:

ARP -S 10.0.0.80 00-AA-00-4F-2 A-9C

AT

Plans to run commands and programs on your computer at the specified time and date. The AT command can only be used when the "Plan" service is running. If you use it without a parameter, the AT lists the scheduled commands.

grammar

AT [/ computername] [{[ID] [/ delete] / delete [/ yes]}]

AT [[/ computername] hours: minutes [/ interactive] [{/ every: Date "[, ...] / next: Date [, ...]}] Command]

parameter

/ computername

Specify a remote computer. If this parameter is omitted, the AT schemes the commands and programs on the local computer.

Id

Specifies the identification code assigned to the planned command.

/ delete

Cancel the scheduled command. If the ID is omitted, all scheduled commands in the computer will be canceled.

/ YES

When you delete the scheduled event, you answer "Yes" for all inquiry from the system.

Hours: minutes

Specifies the time of the command to run. This time was used in a 24-hour hour (ie from 00:00 [midnight] to 23:59): minutes format.

/ interactive

For users logged in when running Command, the Command allows Command to interact with the user's desktop.

/ every:

Run the command command every week or monthly specified date (for example, every Thursday, or a month on the third day).

date

Specifies the date of the run command. You can specify a week or day (ie, type M, T, W, TH, F, S, SU) or a certain day or day in a month (ie, type numbers between 1 and 31) . Separate multiple date items with commas. If DATE is omitted, AT uses the current day of the month.

/ next:

Run Command when the next specified date (for example, next Thursday) comes.

Command

Specifies the Windows command to run, program (.exe or .com file) or batch program (.bat or .cmd file). When the command requires the path as a parameter, use an absolute path, which is the entire path starting from the drive letter. If the command is on the remote computer, specify the general named Agreement (UNC) symbol of the server and shared name instead of the remote drive letter.

/?

Display help at the command prompt.

Comment

Schtasks is a more powerful super-collection command, which contains all the features in the AT command line tool. For all command line plan tasks, Schtasks can be used to replace AT. For more information on Schtasks, see "Related Topics". Use AT

When using the AT command, you must be a member of the local administrators group.

转载请注明原文地址:https://www.9cbs.com/read-113049.html

New Post(0)