spirit posteets tagged windows  [ Profile ]

Sort by: Date / Title /

  1. 6 years ago
    1. eventcreate /t information /id 103 /so "F-Secure Anti-Virus" /L APPLICATION /d "Create event test"
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/2159"></script>
  2. 6 years ago
    1. gpresult /r
    2. gpedit.msc
    3. rsop.msc
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/2158"></script>
  3. 6 years ago
    Spot Odd Executables - wmic PROCESS WHERE "NOT ExecutablePath LIKE '%Windows%'" GET ExecutablePath
    Look at services that are set to start automatically - wmic SERVICE WHERE StartMode="Auto" GET Name, State
    Find user-created shares (usually not hidden) - wmic SHARE WHERE "NOT Name LIKE '%$'" GET Name, Path
    Find stuff that starts on boot - wmic STARTUP GET Caption, Command, User
    Identify any local system accounts that are enabled (guest, etc.) - wmic USERACCOUNT WHERE "Disabled=0 AND LocalAccount=1" GET Name"
    Change Start Mode of Service - wmic service where (name like "Fax" OR name like "Alerter") CALL ChangeStartMode Disabled
    Number of Logons Per USERID - wmic netlogin where (name like "%skodo") get numberoflogons
    Obtain a Certain Kind of Event from Eventlog - wmic ntevent where (message like "%logon%") list brief
    Clear the Eventlog (Security example) - wmic nteventlog where (description like "%secevent%") call cleareventlog
    Get Mac Address - wmic nic get macaddress
    Reboot or Shutdown - wmic os where buildnumber="2600" call reboot
    Update static IP address - wmic nicconfig where index=9 call enablestatic("192.168.16.4"), ("255.255.255.0")
    Change network gateway - wmic nicconfig where index=9 call setgateways("192.168.16.4", "192.168.16.5"),(1,2)
    Enable DHCP - wmic nicconfig where index=9 call enabledhcp
    Service Management - wmic service where caption="DHCP Client" call changestartmode "Disabled"
    Start an Application - wmic process call create "calc.exe"
    Terminate an Application - wmic process where name="calc.exe" call terminate
    Change Process Priority - wmic process where name="explorer.exe" call setpriority 64
    Get List of Process Identifiers - wmic process where (Name='svchost.exe') get name,processid
    Information About Harddrives - wmic logicaldisk where drivetype=3 get name, freespace, systemname, filesystem, size, volumeserialnumber
    Information about os - wmic os get bootdevice, buildnumber, caption, freespaceinpagingfiles, installdate, name, systemdrive, windowsdirectory /format:htable > c:osinfo.htm
    Information about files - wmic path cim_datafile where "Path='windowssystem32wbem' and FileSize>1784088" > c:wbemfiles.txt
    Process list - wmic process get /format:htable > c:process.htm
    Retrieve list of warning and error events not from system or security logs - WMIC NTEVENT WHERE "EventType<3 AND LogFile != 'System' AND LogFile != 'Security'" GET LogFile, SourceName, EventType, Message, TimeGenerated /FORMAT:"htable.xsl":" datatype = number":" sortby = EventType" > c:appevent.htm
    Total Hard Drive Space Check - wmic LOGICALDISK LIST BRIEF
    Get Running Services Information - Wmic service where (state=”running”) get caption, name, startmode, state
    Get Startmode of Services - Wmic service get caption, name, startmode, state
    Get Domain Names And When Account PWD set to Expire - WMIC UserAccount GET name,PasswordExpires /Value
    Get Hotfix and Security Patch Information - WMIC QFE GET /format:CSV >QFE.CSV
    Get Startup List - wmic startup list full
    Find a specific Process - wmic process list brief - find "cmd.exe"
    Get List of IP Interfaces - wmic nicconfig where IPEnabled='true'
    Change IP Address - wmic nicconfig where Index=1 call EnableStatic ("10.10.10.10"), ("255.255.255.0")
    OS/System Report HTML Formatted - wmic /output:c:os.html os get /format:hform
    Products/Programs Installed Report HTML Formatted - wmic /output:c:product.html product get /format:hform
    Services Report on a Remote Machine HTML Formatted - wmic /output:c:services.htm /node:server1 service list full / format:htable
    Turn on Remoted Desktop Remotely! - Wmic /node:"servername" /user:"user@domain" /password: "password"
    RDToggle where ServerName="server name" call SetAllowTSConnections 1
    Get Server Drive Space Usage Remotely - WMIC /Node:%%A LogicalDisk Where DriveType="3" Get DeviceID,FileSystem,FreeSpace,Size /Format:csv MORE /E +2 >> SRVSPACE.CSV
    Get PC Serial Number - wmic /node:”HOST” bios get serialnumber
    Get PC Product Number - wmic /node:”HOST” baseboard get product
    Get Services for Remote Machine in HTML Format - wmic /output:c:services.htm /node:server1 service list full / format:htable
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/2147"></script>
  4. sponsorised links
  5. 8 years ago
    1. #Linux
    2. for ip in $(seq 1 254); do ping -c 1 192.168.1.$ip>/dev/null; [ $? -eq 0 ] && echo "192.168.1.$ip UP" || : ; done
    3.  
    4. #Windows:
    5. for /L %I in (1,1,254) DO ping -w 30 -n 1 192.168.1.%I | find "Reply"
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/2130"></script>
  6. 10 years ago
    1. ipconfig /flushdns
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1148"></script>
  7. 11 years ago
    /WINDOWS/system32/drivers/etc
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/859"></script>
  8. 11 years ago and saved by 1 other
    tasklist -> ps
    
    taskkill -> kill
    (taskkill /PID <pid>)
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/801"></script>
  9. 11 years ago
    1. Windows Registry Editor Version 5.00
    2.  
    3. [HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Security]
    4. "Level1Remove"="exe;zip;msi"
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/86"></script>
  10. 11 years ago and saved by 1 other
    1. # Pour ajouter une route vers le réseau 192.168.1.1/24 à travers la passerelle 172.10.10.1
    2. route add 192.168.1.1 mask 255.255.255.0 172.10.10.1
    3.  
    4. # Pour que la route soit permanente :
    5. route -p add 192.168.1.1 mask 255.255.255.0 172.10.10.1
    Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/72"></script>

First / Previous / Next / Last / Page 1 of 1 (9 posteets)