Command Line Kung Fu

published by dadmin on 9 December, 2008 - 00:21
Here is a bunch of commands that are good to bear in mind when you troubleshoot a Windows system. By knowing these you can find out a lot of information without depending on 3rd party applications.

arp -a

Find other systems on the same subnet that the machine has been communicating with lately.

ipconfig /displaydns

Useful to find out which other systems the machine have resolved using DNS.

net use \\[targetIP] [password] /u:[user]

Set up an SMB session. If you do not enter a password, you will be prompted for one.

net use * \\[targetIP]\[share] [password] /u:[user]

Mount a share on a target. Some versions of windows require you to enter the machine name before the username. net use * \\[targetIP]\[share] [password] /u:[MachineName]\[user]

net use \\[targetIP] /del

Drop an SMB session.

net use * /del

Drop all SMB sessions.

for /L %i in (1,1,255) do @ping –n 1 192.168.0.%i | find "Reply"

Perform a PING sweep (192.168.0.x)

for /L %i in (1,1,255) do @echo 192.168.0.%i: & @nslookup 192.168.0.%i 2>nul | find "Name"

Reverse DNS Lookup

shutdown /a

Abort system shutdown

findstr /s /p /d:c:\windows /m mp3 *

Find all files in c:\windows where the filename contains the string "mp3"

wmic /node:[IPaddress] /user:[admin] /password:[password] qfe where hotfixid="KB958644" list full

Check if a patch is installed on a remote box

for /L %i in (1,0,2) do @(ping -n 1 HostIPaddr || echo ^G) & ping -n 2 127.0.0.1

Ping a machine and beep if a packet is missing