{"id":806,"date":"2025-10-24T15:04:31","date_gmt":"2025-10-24T07:04:31","guid":{"rendered":"https:\/\/www.youvii.site\/?p=806"},"modified":"2025-10-24T15:09:31","modified_gmt":"2025-10-24T07:09:31","slug":"windowsmingling","status":"publish","type":"post","link":"https:\/\/www.youvii.site\/index.php\/archives\/windowsmingling","title":{"rendered":"Windows\u547d\u4ee4"},"content":{"rendered":"<h1>Windows\u547d\u4ee4<\/h1>\n<p>ifconfig \/all \u83b7\u53d6\u83b7\u53d6\u57df\u540d\u3001IP\u5730\u5740\u3001DHCP\u670d\u52a1\u5668\u3001\u7f51\u5173\u3001MAC\u5730\u5740\u3001\u4e3b\u673a\u540d<\/p>\n<p>net time \/domain \u67e5\u770b\u57df\u540d\u3001\u65f6\u95f4<\/p>\n<p>net view \/domain \u67e5\u770b\u57df\u5185\u6240\u6709\u5171\u4eab<\/p>\n<p>net view ip \u67e5\u770b\u5bf9\u65b9\u5c40\u57df\u7f51\u5185\u5f00\u542f\u4e86\u54ea\u4e9b\u5171\u4eab<\/p>\n<p>net config workstation \u67e5\u770b\u57df\u540d\u3001\u673a\u5668\u540d\u7b49<\/p>\n<p>net user \u7528\u6237\u540d \u5bc6\u7801 \/add \u5efa\u7acb\u7528\u6237<\/p>\n<p>net user \u7528\u6237\u540d \/del #\u5220\u9664\u7528\u6237<\/p>\n<p>net user guest \/active:yes \u6fc0\u6d3bguest\u8d26\u6237<\/p>\n<p>net user \u67e5\u770b\u8d26\u6237<\/p>\n<p>net user \u8d26\u6237\u540d \u67e5\u770b\u6307\u5b9a\u8d26\u6237\u4fe1\u606f<\/p>\n<p>net user \/domain \u67e5\u770b\u57df\u5185\u6709\u54ea\u4e9b\u7528\u6237\uff0cWindows NT Workstation \u8ba1\u7b97\u673a\u4e0a\u53ef\u7528\uff0c\u7531\u6b64\u53ef\u4ee5\u6b64\u5224\u65ad\u7528\u6237\u662f\u5426\u662f\u57df\u6210\u5458\u3002<\/p>\n<p>net user \u7528\u6237\u540d \/domain \u67e5\u770b\u8d26\u6237\u4fe1\u606f<\/p>\n<p>net group \/domain \u67e5\u770b\u57df\u4e2d\u7684\u7ec4<\/p>\n<p>net group &quot;domain admins&quot; \/domain \u67e5\u770b\u5f53\u524d\u57df\u7684\u7ba1\u7406\u7528\u6237<\/p>\n<p>query user \u67e5\u770b\u5f53\u524d\u5728\u7ebf\u7684\u7528\u6237<\/p>\n<p>net localgroup \u67e5\u770b\u6240\u6709\u7684\u672c\u5730\u7ec4<\/p>\n<p>net localgroup administrators \u67e5\u770badministrators\u7ec4\u4e2d\u6709\u54ea\u4e9b\u7528\u6237<\/p>\n<p>net localgroup administrators \u7528\u6237\u540d \/add \u628a\u7528\u6237\u6dfb\u52a0\u5230\u7ba1\u7406\u5458\u7ec4\u4e2d<\/p>\n<p>net start \u67e5\u770b\u5f00\u542f\u670d\u52a1<\/p>\n<p>net start \u670d\u52a1\u540d \u5f00\u542f\u67d0\u670d\u52a1<\/p>\n<p>net stop \u670d\u52a1\u540d \u505c\u6b62\u67d0\u670d\u52a1<\/p>\n<p>net share \u67e5\u770b\u672c\u5730\u5f00\u542f\u7684\u5171\u4eab<\/p>\n<p>net share ipc$ \u5f00\u542fipc$\u5171\u4eab<\/p>\n<p>net share ipc$ \/del \u5220\u9664ipc$\u5171\u4eab<\/p>\n<p>net share c$ \/del \u5220\u9664C\uff1a\u5171\u4eab<\/p>\n<p>192.168.0.108c \u8bbf\u95ee\u9ed8\u8ba4\u5171\u4eabc\u76d8<\/p>\n<p>dsquery server \u67e5\u770b\u6240\u6709\u57df\u63a7\u5236\u5668<\/p>\n<p>dsquery subnet \u67e5\u770b\u57df\u5185\u5185\u5b50\u7f51<\/p>\n<p>dsquery group \u67e5\u770b\u57df\u5185\u5de5\u4f5c\u7ec4<\/p>\n<p>dsquery site \u67e5\u770b\u57df\u5185\u7ad9\u70b9<\/p>\n<p>netstat -a \u67e5\u770b\u5f00\u542f\u4e86\u54ea\u4e9b\u7aef\u53e3,\u5e38\u7528netstat -an<\/p>\n<p>netstat -n \u67e5\u770b\u7aef\u53e3\u7684\u7f51\u7edc\u8fde\u63a5\u60c5\u51b5\uff0c\u5e38\u7528netstat -an<\/p>\n<p>netstat -v \u67e5\u770b\u6b63\u5728\u8fdb\u884c\u7684\u5de5\u4f5c<\/p>\n<p>netstat -p \u534f\u8bae\u540d \u4f8b\uff1anetstat -p tcq\/ip \u67e5\u770b\u67d0\u534f\u8bae\u4f7f\u7528\u60c5\u51b5\uff08\u67e5\u770btcp\/ip\u534f\u8bae\u4f7f\u7528\u60c5\u51b5\uff09<\/p>\n<p>netstat -s \u67e5\u770b\u6b63\u5728\u4f7f\u7528\u7684\u6240\u6709\u534f\u8bae\u4f7f\u7528\u60c5\u51b5<\/p>\n<p>nbtstat -A ip \u5bf9\u65b9136\u5230139\u5176\u4e2d\u4e00\u4e2a\u7aef\u53e3\u5f00\u4e86\u7684\u8bdd\uff0c\u5c31\u53ef\u67e5\u770b\u5bf9\u65b9\u6700\u8fd1\u767b\u9646\u7684\u7528\u6237\u540d\uff0803\u524d\u7684\u4e3a\u7528\u6237\u540d\uff09-\u6ce8\u610f\uff1a\u53c2\u6570-A\u8981\u5927\u5199<\/p>\n<p>reg save hklmsam sam.hive \u5bfc\u51fa\u7528\u6237\u7ec4\u4fe1\u606f\u3001\u6743\u9650\u914d\u7f6e<\/p>\n<p>reg save hklmsystem system.hive \u5bfc\u51faSYSKEY<\/p>\n<p>net use \u76ee\u6807IPipc$ \u5bc6\u7801 \/u:\u7528\u6237\u540d \u8fde\u63a5\u76ee\u6807\u673a\u5668<\/p>\n<p>at \u76ee\u6807IP 21:31 c:server.exe \u5728\u67d0\u4e2a\u65f6\u95f4\u542f\u52a8\u67d0\u4e2a\u5e94\u7528<\/p>\n<p>wmic \/node:&quot;\u76ee\u6807IP&quot; \/password:&quot;123456&quot; \/user:&quot;admin&quot; \u8fde\u63a5\u76ee\u6807\u673a\u5668<\/p>\n<p>psexec.exe \u76ee\u6807IP -u username -p password -s cmd \u5728\u76ee\u6807\u673a\u5668\u4e0a\u6267\u884ccmd<\/p>\n<p>finger username @host \u67e5\u770b\u6700\u8fd1\u6709\u54ea\u4e9b\u7528\u6237\u767b\u9646<\/p>\n<p>route print \u663e\u793a\u51faIP\u8def\u7531\uff0c\u5c06\u4e3b\u8981\u663e\u793a\u7f51\u7edc\u5730\u5740Network addres\uff0c\u5b50\u7f51\u63a9\u7801Netmask\uff0c\u7f51\u5173\u5730\u5740Gateway addres\uff0c\u63a5\u53e3\u5730\u5740Interface<\/p>\n<p>arp \u67e5\u770b\u548c\u5904\u7406ARP\u7f13\u5b58\uff0cARP\u662f\u540d\u5b57\u89e3\u6790\u7684\u610f\u601d\uff0c\u8d1f\u8d23\u628a\u4e00\u4e2aIP\u89e3\u6790\u6210\u4e00\u4e2a\u7269\u7406\u6027\u7684MAC\u5730\u5740\u3002<\/p>\n<p>arp -a \u5c06\u663e\u793a\u51fa\u5168\u90e8\u4fe1\u606f<\/p>\n<p>nslookup IP\u5730\u5740\u4fa6\u6d4b\u5668<\/p>\n<p>tasklist \u67e5\u770b\u5f53\u524d\u8fdb\u7a0b<\/p>\n<p>taskkill \/pid PID\u6570 \u7ec8\u6b62\u6307\u5b9aPID\u8fdb\u7a0b<\/p>\n<p>whoami \u67e5\u770b\u5f53\u524d\u7528\u6237\u53ca\u6743\u9650<\/p>\n<p>systeminfo \u67e5\u770b\u8ba1\u7b97\u673a\u4fe1\u606f\uff08\u7248\u672c\uff0c\u4f4d\u6570\uff0c\u8865\u4e01\u60c5\u51b5\uff09<\/p>\n<p>ver \u67e5\u770b\u8ba1\u7b97\u673a\u64cd\u4f5c\u7cfb\u7edf\u7248\u672c<\/p>\n<p>tasklist \/svc \u67e5\u770b\u5f53\u524d\u8ba1\u7b97\u673a\u8fdb\u7a0b\u60c5\u51b5<\/p>\n<p>netstat -ano \u67e5\u770b\u5f53\u524d\u8ba1\u7b97\u673a\u8fdb\u7a0b\u60c5\u51b5<\/p>\n<p>wmic product &gt; ins.txt \u67e5\u770b\u5b89\u88c5\u8f6f\u4ef6\u4ee5\u53ca\u7248\u672c\u8def\u5f84\u7b49\u4fe1\u606f\uff0c\u91cd\u5b9a\u5411\u5230ins.txt<\/p>\n<blockquote>\n<p>\u66f4\u65b0: 2025-04-25 21:13:15<br \/>\n\u539f\u6587: <a href=\"https:\/\/www.yuque.com\/yuhui.net\/network\/nazd79m30qgsf3up\">https:\/\/www.yuque.com\/yuhui.net\/network\/nazd79m30qgsf3up<\/a><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Windows\u547d\u4ee4 ifconfig \/all \u83b7\u53d6\u83b7\u53d6\u57df\u540d\u3001IP\u5730\u5740\u3001DHCP\u670d\u52a1\u5668\u3001\u7f51\u5173\u3001MAC\u5730\u5740\u3001\u4e3b\u673a\u540d net time \/domain \u67e5\u770b\u57df\u540d\u3001\u65f6\u95f4 net view \/domain \u67e5\u770b\u57df\u5185\u6240\u6709\u5171\u4eab net view ip \u67e5\u770b\u5bf9\u65b9\u5c40\u57df\u7f51\u5185\u5f00\u542f\u4e86\u54ea\u4e9b\u5171\u4eab net config workstation \u67e5\u770b\u57df\u540d\u3001\u673a\u5668\u540d\u7b49 net user \u7528\u6237\u540d \u5bc6\u7801 \/add \u5efa\u7acb\u7528\u6237 net u [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[124,119,2],"tags":[22,43,90,99],"class_list":["post-806","post","type-post","status-publish","format-standard","hentry","category-qianzhizhishi","category-shentouceshijichu-network_sec","category-network_sec","tag-windows","tag-43","tag-luyou","tag-dhcp"],"_links":{"self":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/comments?post=806"}],"version-history":[{"count":0,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/806\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/media?parent=806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/categories?post=806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/tags?post=806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}