Getting started with windows penetration testing

One, windows service

    The role of windows service: The
        service determines whether some functions of the computer are enabled.
        Different services correspond to different functions
        . The services provided by the computer can effectively realize resource sharing.
 
    Common services:
        web service, dns service, dhcp service, mail service, telnet service , Ssh service, smb service
 

2. Port

    1. There are two types of ports: famous ports and dynamic ports

        Well-known ports are well-known port numbers, ranging from 0 to 1023. These port numbers are generally assigned to some services. For example, port 21 is assigned to ftp service, port 25 is assigned to SMTP (Simple Mail Transfer Protocol) service, and port 80 is assigned to HTTP Services, port 135 is allocated to RPC (Remote Procedure Call) services and so on.
        Dynamic ports range from 1024 to 65535. These port numbers are generally not fixedly assigned to a certain service, which means that many services can use these ports. As long as the running program requests the system to access the network, the system can use these One of the port numbers is allocated for use by the program.

    2. Common ports:

        HTTPCommonly used port number of protocol proxy server: 80/8080/3128/8081/9080
        FTP(File transfer) Protocol server commonly used port number: 21
        Telnet(Remote login) Protocol proxy server commonly used port: 23
        TFTP(Trivial File Transfer Protocol) simple file transfer protocol, the default port number is 69/udp
        SSH(Secure login), SCP (file transfer), port redirection, the default port number is 22/tcp
        SMTP(Simple Mail Transfer Protocol (E-mail)) Simple Mail Transfer Protocol, the default port number is 25/tcp,
        POP3(Post Office Protocol (E-mail)), the default port number is 110/tcp
        Tomcat, The default port number is 8080
        Win2003 remote login, The default port number is 3389
        OracleDatabase, the default port number is 1521
        MS SQL*serverDatabase server, the default port number is 1433/tcp 1433/udp
        QQThe default port number is 1080/udp

Third, the registration form

    The registry is a core database in the windows operating system, which stores various parameters, which directly controls the startup of windows, the loading of hardware drivers and the operation of some windows applications, thus playing a core role in the entire system. These functions include software and hardware related configuration and status information, such as the initial conditions of the application and the resource manager shell, preferences and uninstall data stored in the registry. The settings and various permissions of the entire system of networked computers, the association of file extensions with application programs, hardware descriptions, status and attributes, performance records and other low-level system status information, and other data.

Four, common dos commands

command effect
color Change cmd color
ping -t (long ping) -l (file size) ip
ipconfig /all (Detailed information) View ip address
ipconfig /release Release ip
ipconfig /renew Get ip again
systeminfo Get system details
arp -a Get the local area network arp cache table
net view Get the names of other computers in the current LAN
shutdown -s -t 180 -c "You are hacked, the system will shut down immediately!"
msg administrator “hello” Send to user information
to you View current directory information
cd Switch current disk directory
D: Switch disk
start www.baidu.com open the Web page
start qwe.txt Open qwe.txt
copy 1.txt C: Copy files
of the Delete Files
cls Clear screen
copy con 123.txt Create a file
md directory name Create a directory
rd directory name Delete folder
type 123.txt View file content
ren source file new file Rename folder
move Move files
tree Tree display folder structure
net use K: \192.168.1.1\cd$ Map disk
net start Check which services are enabled
net start telnet Open service
net stop telnet Close service
net user username password/add Create user
netstat -ano View port number
tasklist /im process ID/service name View process number
netstat -ano findstr “8080”
netsh Network tools

The .bat batch file is a combined file of dos commands. The commands written in the batch file will be executed one by one.
    Create a new batch file
    When saving a new text file, change the suffix to bat
    or use the command
        copy con 123.bat
        net user cr 123 /add
        net localgroup administrator cr /add
    Ctrl+z and press
    Enter

Guess you like

Origin blog.csdn.net/Han_V_Qin/article/details/109598217