-
dir
: 列出当前目录中的文件和子目录。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> dir
Directory of C:\Users\YourUsername\Desktop
03/28/2024 10:00 AM <DIR> .
03/28/2024 10:00 AM <DIR> ..
03/28/2024 09:45 AM 245 file1.txt
03/28/2024 09:50 AM 367 file2.txt
2 File(s) 612 bytes
3 Dir(s) 50,000,000,000 bytes free
-
cd
: 更改当前目录。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> cd Documents
C:\Users\YourUsername\Desktop\Documents>
-
mkdir
: 创建新目录。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> mkdir NewFolder
C:\Users\YourUsername\Desktop\Documents>
-
rmdir
or rd
: 删除目录。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> rmdir NewFolder
The system cannot find the file specified.
C:\Users\YourUsername\Desktop\Documents>
-
del
or erase
: 删除文件。
模拟执行(示例删除文件file1.txt):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> del file1.txt
Deleting file1.txt
C:\Users\YourUsername\Desktop\Documents>
-
copy
: 复制文件。
模拟执行(示例复制文件file1.txt为file3.txt):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> copy file1.txt file3.txt
1 file(s) copied.
C:\Users\YourUsername\Desktop\Documents>
-
move
: 移动文件。
模拟执行(示例移动文件file3.txt到上一级目录):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> move file3.txt ..\
1 file(s) moved.
C:\Users\YourUsername\Desktop\Documents>
-
rename
or ren
: 重命名文件。
模拟执行(示例将file2.txt重命名为newfile2.txt):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> rename file2.txt newfile2.txt
C:\Users\YourUsername\Desktop\Documents>
-
ipconfig
: 显示网络配置信息。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> ipconfig
Windows IP Configuration
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::xxxx:xxxx:xxxx:xxxx%12
IPv4 Address. . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
...
-
ping
: 向指定的主机发送 ICMP 回显请求。
模拟执行(示例Ping谷歌):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> ping www.google.com
Pinging www.google.com [216.58.192.4] with 32 bytes of data:
Reply from 216.58.192.4: bytes=32 time=10ms TTL=117
Reply from 216.58.192.4: bytes=32 time=11ms TTL=117
...
-
tracert
or traceroute
: 显示数据包从本地计算机到目标计算机的路径。
模拟执行(示例Traceroute谷歌):
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> tracert www.google.com
Tracing route to www.google.com [216.58.192.4]
over a maximum of 30 hops:
1 1 ms 1 ms 1 ms 192.168.1.1
2 7 ms 5 ms 6 ms 10.0.0.1
...
-
nslookup
: 查询域名对应的IP地址。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> nslookup www.example.com
Server: UnKnown
Address: 192.168.1.1
Non-authoritative answer:
Name: www.example.com
Addresses: 93.184.216.34
2606:2800:220:1:248:1893:25c8:1946
-
netstat
: 显示网络连接和端口号。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> netstat -ano
Active Connections
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1234
TCP 192.168.1.100:12345 8.8.8.8:443 ESTABLISHED 5678
...
-
arp
: 显示本地网络上的ARP缓存。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop\Documents> arp -a
Interface: 192.168.1.100 --- 0x2
Internet Address Physical Address Type
192.168.1.1 00-11-22-33-44-55 dynamic
192.168.1.2 00-aa-bb-cc-dd-ee dynamic
...
-
net user
: 显示本地用户账户信息。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> net user
User accounts for \\COMPUTERNAME
-------------------------------------------------------------------------------
Administrator Guest User
The command completed successfully.
-
netsh advfirewall show allprofiles
: 显示防火墙配置信息。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> netsh advfirewall show allprofiles
Domain Profile Configuration (current):
--------------------------------------------------
Operational mode = Enable
...
-
ipconfig
: 显示网络配置信息。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> ipconfig
Windows IP Configuration
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::xxxx:xxxx:xxxx:xxxx%12
IPv4 Address. . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
...
-
ping
: 向指定的主机发送 ICMP 回显请求。
模拟执行(示例Ping谷歌):
plaintextCopy code
C:\Users\YourUsername\Desktop> ping www.google.com
Pinging www.google.com [216.58.192.4] with 32 bytes of data:
Reply from 216.58.192.4: bytes=32 time=10ms TTL=117
Reply from 216.58.192.4: bytes=32 time=11ms TTL=117
...
-
tracert
or traceroute
: 显示数据包从本地计算机到目标计算机的路径。
模拟执行(示例Traceroute谷歌):
plaintextCopy code
C:\Users\YourUsername\Desktop> tracert www.google.com
Tracing route to www.google.com [216.58.192.4]
over a maximum of 30 hops:
1 1 ms 1 ms 1 ms 192.168.1.1
2 7 ms 5 ms 6 ms 10.0.0.1
...
-
nslookup
: 查询域名对应的 IP 地址。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> nslookup www.example.com
Server: UnKnown
Address: 192.168.1.1
Non-authoritative answer:
Name: www.example.com
Addresses: 93.184.216.34
2606:2800:220:1:248:1893:25c8:1946
-
netstat
: 显示网络连接和端口号。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> netstat -ano
Active Connections
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1234
TCP 192.168.1.100:12345 8.8.8.8:443 ESTABLISHED 5678
...
-
arp
: 显示本地网络上的 ARP 缓存。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> arp -a
Interface: 192.168.1.100 --- 0x2
Internet Address Physical Address Type
192.168.1.1 00-11-22-33-44-55 dynamic
192.168.1.2 00-aa-bb-cc-dd-ee dynamic
...
-
nbtstat
: 显示 NetBIOS over TCP/IP (NetBT) 协议统计信息、表格和缓存信息。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> nbtstat -a RemoteHost
Local Area Connection:
Node IpAddress: [192.168.1.100] Scope Id: []
NetBIOS Remote Machine Name Table
Name Type Status
---------------------------------------------
REMOTEHOST <00> UNIQUE Registered
REMOTEHOST <03> UNIQUE Registered
...
-
route
: 显示或修改本地 IP 路由表。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> route print
===========================================================================
Interface List
15...00 1a 2b 3c 4d 5e ......Ethernet
...
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 10
...
===========================================================================
-
tasklist
: 显示正在运行的进程列表。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> tasklist
Image Name PID Session Name Session
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 8 K
System 4 Services 0 9,272 K
...
-
taskkill
: 终止正在运行的进程。
模拟执行(示例终止 PID 1234 的进程):
plaintextCopy code
C:\Users\YourUsername\Desktop> taskkill /pid 1234 /f
SUCCESS: The process with PID 1234 has been terminated.
-
schtasks
: 计划和管理定时任务。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> schtasks /query /fo LIST
Folder: \
...
-
wevtutil
: 查询和管理 Windows 事件日志。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> wevtutil qe System /c:10 /rd:true
Start Time: 28/03/2024 12:00:00
End Time: 28/03/2024 13:00:00
...
-
bitsadmin
: 后台智能传输服务(BITS)作业列表。
模拟执行:
plaintextCopy code
C:\Users\YourUsername\Desktop> bitsadmin /list /allusers
BITSAdmin version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
{2C5AB123-4567-8901-2345-678901234567} 'ExampleJob' SUSPEND
Files: 1 / 1 COMPLETE