Getting started with the net use command
1. Establish an empty connection
net use //IP/ipc$ "" /user:""
2. Establish a non-empty connection
net use //IP/ipc$ "密码" /user:"用户名"
3. Map the default share
net use z: //IP/c$ "密码" /user:"用户名"
#(即可将对方的c盘映射为自己的z盘，其他盘类推) 如果已经和目标建立了ipc$，则可以直接用IP+盘符+$访问,具体命令 :
net use z: //IP/c$
4. Delete an ipc$ connection
net use //IP/ipc$ /del
5. Delete shared mapping
net use c: /del #删除映射的c盘，其他盘类推
net use * /del #删除全部,会有提示要求按y确认
6. Look at the shared resources of the remote host
net view //IP #（但看不到默认共享）
7. View the shared resources of the local host
net share #（可以看到本地的默认共享）
8. List of usernames of remote hosts
nbtstat -A IP
9. Get the user list of the local host
net user
net time //IP
11. Display the current service of the local host
net start
12. Start/stop local service
net start 服务名 /y net stop 服务名 /y
13. Map remote shares
net use z: //IP/baby #此命令将共享名为baby的共享资源映射到z盘
14. Delete shared mapping
net use c: /del #删除映射的c盘，其他盘类推 net use * /del /y #删除全部
15. Copy files to remote host
copy /路径/srv.exe //IP/共享目录名，#如： copy ccbirds.exe //*.*.*.*/c 即将当前目录下的文件复制到对方c盘内
16. Add scheduled tasks remotely
at //ip 时间 程序名#如： at //127.0.0.0 11:00 love.exe #注意：时间尽量使用24小时制；在系统默认搜索路径（比如system32/）下不用加路径，否则必须加全路径
17. Open the telnet of the remote host
A small program is used here: opentelnet.exe, which is available on all major download sites, and four requirements need to be met:
1) The target has enabled the ipc$ share
2) You must have an administrator password and account
3) The target has enabled the RemoteRegistry service, and the user should be authenticated by ntlm
4) Valid for WIN2K/XP, NT has not been tested
Command format: OpenTelnet.exe // server account psw NTLM authentication port
test example is as follows: c:/>OpenTelnet.exe // . . . administrator “” 1 90
18. Activate user/join administrator group
net uesr account /active:yes net localgroup administrators account /add
19. Close the telnet of the remote host
A small program is also required: ResumeTelnet.exe
Command format: ResumeTelnet.exe //server account psw
Example as follows: c:/>ResumeTelnet.exe // . . . administrator ""
20. Delete an established ipc$ connection
net use //IP/ipc$ /del
21. Remote shutdown and restart instance
#建立连接
net use \\IP password /user:username
#使用shutdown命令实现关机并重启
shutdown -r -m \\IP -s –t 0
#删除连接
net use \\IP /del