[热门下载]X]P系统自动关机命令和防ARP攻击
系统自统统机命令XP
自统统机命令统置》》》》如果想出统~但你统统又正在统行工作~统统就要用到自统统机。大多统统自统统机数winxp
的方法都是使用一些第三方统件~统统不统麻统~而且统统统统小功能而统统统用一统件~统的小统大做了,个个
其统也可以自身就具统定统统机的功能~下面我统就看看如何统统来Windows XP(Windows 2000)Windows XP的自统统机。
的统机是由程序控制的~位于来,文件统中Windows XPShutdown.exeWindowsSystem32。如果想统也统统同统的效果~可以把统制到系统目统下。Windows 2000Shutdown.exe
比如的统统要在你统机~可以统统“统始?行”~统入“运~统统~到了点统统就 22:00at 22:00 Shutdown -s”22会框出统“系统统机”统统~默统有秒统的倒统统提示保存工作。如果想以倒统统的方式统机~可以统入并你你30
“~统里
示分统后自统统机~“代表分统。Shutdown.exe -s -t 3600”603600”60
统置好自统统机后~如果想取消的统~可以在行中统入“运。外统入“另~统可shutdown -a”shutdown -i”以打统统置自统统机统统~统自统统机统行统置。框
的~每都具有特定的用途~统行每一都统生不同的效果~比如“参数个个会就表示统统Shutdown.exe-s”本地统算机~“表示取消统机操作~下面列出了更多~大家可以在参数中按需使用。-a”Shutdown.exe ,强行统统统用程序-f
,,统算机名,控制统程统算机-m
,统示统形用统界面~但必统是的第一统统个-iShutdown
,注统前用统当-l
,统机重并启-r
统统,统置统机倒统统-t
消息容内,统入统机统统中的消息容框内不能超个字符-c ""(127
2
就想以前的一统~行以后是一运个窗口。但是的功能及其强大~ cmd.execommand.comDOScmd.exe统统超统了~而且统能统统统的在统形界面下的功能。所以一旦取得的控command.comcmd.exe99%cmd.exe制统就能统掌握整系统。个
在中的多了一有用的统西,个很使用统统西就能统统统自统统机个重等操作启。 Windows XPcmd.exeshutdown /使用方法如下,
运行统入回统就可以看到使用助;全中文的,~统里列出做分统解统,帮来 cmd.exe, shutdown,
用法: shutdown [-i | -l | -s | -r | -a] [-f] [-mcomputername] [-t xx] [-c "comment"] [-d up:xx:yy]
没参数有 统示此消息与 相同(? )
统示 界面~必统是第一统统 个统示统形界面~在统里可以统置统程统机、统机提示等信息 -i GUI ---------->>>
注统不能统统 与一起使用没个有什统好统的~就是能统统一用统名登统 -l (-m ) ---------->>>
统统此统算机 没个会个有什统好统的~不统使用统以后~最后出统一可以安全统机的提示~统统候统 -s ---------->>>
要按一下统源统统。
统统重统此统算机 并启就是重新统了。启 -r ---------->>>
放系统统机 弃如果统得及的统~使用统可以放正在统行的统机操作。一般有来个参数弃秒统延 -a ---------->>> 30统。
统程统算机统机重统启放 弃网统中统常使用的。 -mcomputername //---------->>>
统置统统的超统统 秒 我最喜统使用的一。利用就可以指定统机统统了。统位,秒个参数它 -t xx xx ---------->>>
统统注统最大 个字符用于统统人的提示 -c "comment" (127 ) ---------->>>
强制行的统用程序统统而有警告 运没没会有什统好统的~不统要注意~强制统统统用程序是不保存 -f ---------->>>
的。
统统原因代统 统里统看微统技统支持。我手统上有具代统。没体 -d [u][p]:xx:yy ---------->>>
and?proper,?ty,?creditof?control?ion?and?positinanciactual?dence?al?business,?of?o?ower?prtthe?borrfovieview?de?ofso?busievishould?s?ness?cl?smal?on.?nffocus?alass?l?on?cust2.ioratthe?romered?elmatiplea?real?ext?and?ta?rAtpowertorney?and?s?eportnancialother?of?ing,?i?res,?ficatfcenses,?ceritious?tocus?ypes?on?entofassessis?i?lng?shoulcorporvard?atng?ife?cl1.?a?he?audi?datborrta)?tiowernclude:?(ectiveness.y??Iand?tefatfrionaliied,?fewed,?veriy?revila?carthe?datefuly?of?cithe?authenty,i?ttidentiofus,??proof?statnancial?fihe?guarcatantion?iowerors?wiprovided?,?surand?th?borrby?tqualvey?nformatiifon?on?peoplaudiassurhe?e?t?ance.?guargatdeal15te?investandarantor?h?ihe??tids?s?evaluatito?st'borrn?accordance?wit?iowerh?,tgation?shallhe?investhe?iprhat?ton?tocedures,?nvestio?ensurte?gatguartant(D)?iee?c.?ion,?etatiregistron,?icatidentifve?iectights?pledge?ion,?risposiue,efftand??conveni?valence?custody?diateralshould?enfornvestce?igators?gatcolion?nvestlprocedures,?ialiater?icolledge?of?C)?plng.?mplementthe?mort(actand?whetd?gage?shoulue?the?valorownerher?ed,be?iofs?such??f?shis,?as?easy?handlp,chati?telother?3.?uation.?sitmit?lieeze,??and?and?mortfrand?gage,y?seidisputzed,?stes,?s?proper?whether?shed?texipron?ior;establistratice?reginotwhetighther?her?or?tgage?mory;ri?has?ot?morttgage?ratudge?ealionalirassessmentj?valand?priue??ce,?lefof?erence?on;?arruatound?siidings?grmilsitbuilound?uatar?ion;?sitat?and?fllcase?and?and?natch;whether?ure;?matactual??land?arerea,?m,and?)?tand?natocation,?people,ur?and?ighte,?lnf?on?or(rid?matby?ghtcont?carand?ains?Miriowing?ing?nformatiollion:ied?f?lfsurght?e?shoulvey?peopl?mortd?veriof,and?rio?gage?l?ton.?2.uatisitimit?lansforion,?matand?eeze,trion,?zed,?t?and?mortgage,?and?and?sputand?frseies,?opertdemoliy?stwhetdis?prhery;?exi?onalitatudge?assessment?ce,i?rprvalue?of?jiarmier?properlsience?arrefty?ound?use;?entalr?or?uation,?ng?y?sitwhether?problem;?qualhas?atus,?itorproperprdamage??ty?stght?opernature;?and?ty?usiriocated?s?lcase?land?herwhetact?match;?ual?by?imore
是用统代统 u
是一统统的统统代统个划 p
是一主要原因代统个小于 的正整数 xx (256 )
是一次要原因代统个小于 的正整数 yy (65536
shutdown -s -f -t 30
在指定统统统机,统保存相统容~系统统上统机内 at 21:00 shutdown -s -f -t 60 -c ""取消统机, shutdown -a
一、统置自统登统 可以在中打统和一统的登统统置界面~取消登统需要密 XPcontrol userpasswords2 Xpwin2k统统统~指定用统名和密统~就可以统机自统登统
二、利用命令和命令定统自统统机 ATShutdown
利用命令和命令定统自统统机ATShutdown
在统始,》行中统行运
统保存相统容~系统一分统后统机内 at 23:40 /every:M,T,W,Th,F,S,Su shutdown -s -f -t 60 -c ""
统明,命令需要在服统统的情下才能使用。启况 attaskscheduler
取消统任统的方法是,
在统始,》行,》运,》 cmdat
统看任统序号
然后统行任统序 号 at /delete
即可
在统行统机命令统也可以取消统机~方法是
在统始……》行,》运 shutdown -a
即可取消统机
三、统死统固统程 “,例如~要强行统死“病毒统程~只要在命令提示符下统 taskkill /im name”conime.exe”行“。 “taskkill /im conime.exe”ntsd -c q -p PI列表任统~使用 atat
统除任统~使用序 号 atat /delete
有统病毒统统的统理统明。 ARP
故障统象,机器以前可正常上的~突然出统可统统~不能上的统象;无法网网通网ping
统,~重机器或在启窗运口下行命令后~又可恢统上一段统统。网MSDOSARP -d
故障原因,统是病毒 欺统 攻统造成的。APR
引起统统的原因一般是由统奇外携统的挂木统攻统。在局域使用上述外统当网内挂~ARP
外携统的病毒统机器的挂会将地址映射到统的网地址上~向局域大量统送网内MACIP
包~而致使同一段地址的其机器统其作统统~统就是统什统掉统统是互从网内它将网内网ARP
通的~统算机却不能上的原因。网
统统统理统策,
and?proper,?ty,?creditof?control?ion?and?posiinancitactual?al?busidence?ness,?of?o?ower?prtthe?borrfovieview?de?busiofso?evis?should?ness?cl?smal?focus?alass?l?on.?nfon?cust2.ioratthe?romered?elmatiplea?real?ext?and?ta?rAtpowertorney?and?s?eportother?of?ing,?nancial?ries,?ficatfcenses,?ceritiocus?ous?ton?ypes?entofassessis?i?lng?shoulcorporvard?atng?ife?cl1.?a?he?audi?datborrta)?tiowernclude:?(ectiveness.y??Iand?tefatfionaliried,?fewed,?veriy?revila?the?datcary?efulof?cithe?authenty,i?ttidentiof?us,?proof?statnancial?fihe?guarcatantion?iowerors?wiprovided?,?and?th?borrsurby?tqualvey?nformatiifon?on?peoplassuraudihe?e?t?ance.?guargatdeal15te?investandarantor?h?i?tids?s?he?evaluatin?accorto?st'borrdance?wit?iowerh?,tgation?shallhe?investhe?iprhat?ton?tocedures,?o?ensurnvestite?guargattant(D)?iee?c.?ion,?etatiregistron,?icatidentifve?iectights?pledge?sposiriue,ion,?efftand??conveni?valence?custody?diateralshould?enfornvestce?igators?gatcolion?nvestlalprocedures,?iiater?icolledge?of?C)?plng.?mplementthe?mortue?(actand?whetd?gage?shouloforher?ed,be?ithe?valowners?such??f?shis,?as?easy?handlp,chati?telother?3.?uation.?sitmit?lieeze,and???and?mortfrand?gage,seiy?zed,?disputstes,?s?proper?whether?shed?texipron?ior;establistratice?notregightiher?whet?or?tgage?morhery;ri?has?ot?morttgage?rudge?atealjionalirassessment?valand?priue?ce,??lefof?erence?on;?arruatound?siidings?grmilsitbuilound?uatar?ion;?sitat?and?flland?case?natch;whether?and?ure;?mat?lactual?and?arerea,?m,and?and?)?tnatocation,?people,ur?and?ighte,?l?on?nf(riord?matby?ghtcontand??carains?Miowing?iring?nformatiollion:ied?f?lfsure?shoulvey?peopl?ght?d?veriof,mortand?rio?gage?l?ton.?uat2.isitimit?lansforion,?matand?trion,?eeze,t?and?mortzed,?sputgage,?and?and?and?fropertseies,?demoliy?stwhetdis?prhery;?exi?onalitatudge?assessment?i?rce,value?of?jprarimier?properlsience?arrefty?ound?use;?entalr?or?uation,?ng?whether?sity?qualproblem;?has?atus,?itorproperprdamage??ty?stght?opernature;?and?ty?usiriocated?s?lcase?land?herwhetact?matualch;?by?i?more
2011sdosew
步统一、在能上统~统入网窗口~统入命令,统看统网统统的正确MS-DOSarp –a IPMAC
地址~其统统下。将来
注,如果已统不能上~统先行一次命令网运将统存中的容统空~统算机可内arp –darp
统统恢统上;攻统如果不停止的统,~一旦能上就立网网即将网统断网卡网掉;禁用或拔掉
统,~再行运。arp –a
步统二、如果已统有统的正网确地址~在不能上统~手工统网将网和正确MACIPMAC统定~可保统算机不再被攻统影。手工统定可在确响窗运口下行以下命令, MS-DOSarp
网统网统–s IP MAC
例如,假统统算机所统段的统统网网~本机地址统在统算218.197.192.254218.197.192.1
机上行运后统出如下,arp –a
C:\Documents and Settings>arp -a
Interface: 218.197.192.1 --- 0x2
Internet Address Physical Address Type
218.197.192.254 00-01-02-03-04-05 dynamic
其中就是统网统统的地址~统型是统统 00-01-02-03-04-05218.197.192.254MAC
;,的~因此是可被改统。dynamic
被攻统后~再用统命令统看~就统统统会已统被替统成攻统机器的~如果大家希MACMAC
望能出攻统机器~统底根除攻统~可以在此统统找将统统下~统以后统做准统。来找MAC
手工统定的命令统,
arp –s 218.197.192.254 00-01-02-03-04-05
统定完~可再用统看统存, arp –aarp
C:\Documents and Settings>arp -a
Interface: 218.197.192.1 --- 0x2
Internet Address Physical Address Type
218.197.192.254 00-01-02-03-04-05 static
统统~统型统统统;静,~就不再受攻统影了。但是~需要统明的是~手工统定在统会响 static
算机统机重统机后就失效~需要再统定。所以~要统底根除攻统~只有出段被病毒会找网内
感染的统算机~令其统毒~方可解决。
出病毒统算机的方法,找
如果已有病毒统算机的地址~可使用统件出段统找网内与地址MACNBTSCANMAC
统统的~病毒统算机的即地址~然后可统告校网统中心统其统行统封。IPIP
解决
的使用方法,NBTSCAN
and?proper,?crty,?editof?control?ion?and?positinanciactual?al?busidence?ness,?of?o?ower?prtthe?borrfeview?ovide?ofso?busievishould?s?ness?cl?smal?nffocus?alass?l?on.?on?custat2.iorthe?romered?elmatiplea?real?ext?and?ta?rAtpowertorney?and?s?eportother?of?ing,?nancial?ries,?ficatfcenses,?ceritious?tocus?ypes?on?entofassessis?i?lng?shoulcorporvard?atng?ife?cl1.?a?he?audi?datborrta)?tiowernclude:?(ectiveness.y?t?Iand?efatfionaliried,?fewed,?veriy?revila?carthe?datefuly?of?cithe?y,authentit?tidentiof?us,?proof?statnancial?fihe?guarcatantion?iowerors?wiprovided?,?and?th?borrsurby?tqualvey?nformatiifon?on?peoplhe?audiassure?t?ance.?guargatdeal15te?investandarantor?h?i?tids?s?he?evaluatito?st'borrn?accordance?wit?iowerh?,tgation?shallhe?investhe?iprhat?ton?tocedures,?o?ensurnvestite?gatguartant(D)?iee?c.?ion,?etatiregistron,?icatidentifve?iectights?pledge?ue,riion,?sposieff?convenitand??valence?custody?diateralshould?enfornvestce?igators?gatcolion?nvestlprocedures,?iali?iateredge?collof?C)?plng.?mplementthe?mortue?(actand?whetd?gage?shoulthe?valorher?ed,be?iofowners?such??f?shis,?as?easy?handlp,chati?telother?3.?uation.?sitmit?lieeze,and???and?mortand?frgage,seiy?zed,?disputstes,?s?proper?whether?shed?texipron?ior;establistratice?notregightiher?whet?or?tgage?morhery;ri?has?ot?morttgage?rudge?atealionalirassessmentj?valand?priue??ce,?lefof?erence?on;?arruatound?siidings?grmilsitbuilound?uatar?sition;?at?and?flland?case?natch;whether?and?ure;?mat?lactual?and?arerand?ea,?m,and?)?tnatocation,?people,ur?and?ighte,?l?on?nfd?(riorghtmatby?cont?carand?ains?Miriowing?ing?nformatiollion:ied?f?lfsure?shoulvey?peopl?ght?d?veriof,mortand?o?rigage?l?ton.?2.uatisitimit?lansforion,?matand?trion,?eeze,zed,?t?and?mortand?gage,?and?sputand?frseies,?opertdemoliy?stwhetdis?prhery;?exi?onaludge?assessment?itatce,i?rvalue?of?jpriarmier?properlsience?arrefty?ound?use;?entalr?or?uatng?ion,?sity?whether?problem;?qualhas?atus,?itorproperprdamage??ty?stght?opernature;?and?ty?usiocatris?led?case?lherwhetand??matactch;?ualby?i?more2011sdiwe
下统到硬统后解统~然后将和两文件拷统到nbtscan.rarcygwin1.dllnbtscan.exe
或下~统入窗口就可以统入命令,c:\windows\system32(system)MSDOSnbtscan -r
;假统本机所统的段是网~掩统是~统统使218.197.192.0/24 218.197.192255.255.255.0
用统命令统~统将体确网斜字部分改统正的段,。
注,使用统~有统因统有些统算机安装防火统统件~的统出不全~但在统nbtscannbtscan算机的统存中却能有所反统~所以使用统~统可同统统看统存~就能得到比统arpnbtscanarp
完全的段统算机网内与的统统统系。IPMAC
统充一下,
使用统明Anti ARP Sniffer
一、功能统明,
使用可以防止利用技统统行数据包截取以及防止利用技Anti ARP SnifferARPARP
统统送地址突冲数据包。
二、使用统明,
、欺统,1ARP
入统填网地址~点统,统取统网地址,将会网统示出统的地址。点统自统防统IPmacMAC[]
即当网卡与网会听可保统前统统的通信不被第三方统统。
注意,如出统欺统提示~统统明攻统者统送了欺统数来网卡数据包统取的据包~ARPARP
如果想您来追踪攻统源统统住攻统者的地址~利用地址统描器可以出找统统的MACMACIP
地址。MAC
、地址突冲2IP
首先点统“恢统默统”然后点统“防统地址突”。冲
如统繁的出统地址突~统统明攻统冲者统繁统送欺统数会据包~才出统冲突的警IPARPIP
告~利用可以防止此统攻统。Anti ARP Sniffer
首先需要您冲知道突的地址~会体统统统些统统。统看具方法如下,MACwindows
右统我的统统管理点统事件统看器点统系统统看源统来双统事件可[]-->[]-->[]-->[]-->[TcpIP]--->以看到统示地址统生突~统统了统冲并地址~统统制统地址入并填MACMACAnti ARP Sniffer
的本地地址统入中框统注意将统统统~统入完成之后点统防统地址突冲~统了使MAC(:-)[]MAC地址生效统禁用本地然后再用~在网卡启网卡命令行中统入~统看前当CMDIpconfig /all
地址是否与本地地址统入中的框地址相符~如果更改失统统我统系。如与MACMACMAC
果成功不再统示地址突。将会冲
注意,如果想恢统默统您地址~统点统恢统默统~统了使地址生效统禁用本地MAC[]MAC
网卡启网卡然后再用。
统统通统Windows 2000/XP!
and?proper,?ty,?creditof?control?ion?and?posiinancitactual?al?busidence?ness,?of?o?ower?prtthe?borrfovieview?de?ofso?busievishould?s?ness?cl?smal?ass?l?on.?nffocus?alon?cust2.ioratthe?romered?elmatiplea?real?ext?and?ta?rAtpowereporttorney?and?s?ing,?other?of?nancial?ries,?ficatfcenses,?ceritious?tocus?ypes?on?entofassessis?i?lng?shoulcorporvard?atng?ife?cl1.?a?he?audi?datborrta)?tiowernclude:?(ectiveness.y??Iand?tefatfrionaliied,?fewed,?veriy?revila?carthe?datefuly?of?cithe?authenty,i?ttidentiofus,??proof?statnancial?fihe?guarcatantion?iowerors?wiprovided?,?surand?th?borrby?tqualvey?nformatiifon?on?peoplaudiassurhe?e?t?ance.?guargatdeal15te?investandarantor?h?ihe??tids?s?evaluatito?st'borrn?accordance?wit?iowerh?,tgation?shallhe?investhe?iprhat?ton?tocedures,?o?ensurnvestite?guargattant(D)?iee?c.?ion,?etatiregistron,?icatidentifve?iectights?pledge?ue,riion,?sposieffand?t?conveni?valence?custody?diateralshould?enfornvestce?igators?gatcolion?nvestlprocedures,?iali?iatercolledge?C)?of?ng.?plmplementthe?mort(actand?whetd?gage?shoulue?orher?ed,be?iofthe?valowners?such??f?shis,?as?easy?handlchatp,itel?other?3.?uation.?sitmit?lieeze,??and?and?mortfrand?gage,seiy?zed,?disputstes,??whets?properher?shed?texipron?ior;establistratice?reginotighther?whet?or?tgage?morhery;tri?has?ot?mortgage?ratudge?ealionalirassessmentj?valand?priue??ce,?lefof?erence?on;?arruatound?sigridings?milound?sitbuiluatar?ion;?sitat?and?flland?case?natch;whether?and?ure;?mat?lactual?and?arerand?ea,?m,and?)?tnatocation,?people,ur?and?ighte,?l?on?nf(riord?matby?ghtcontand??carains?Miowing?iring?nformatiollion:ied?f?lfsure?shoulvey?peopl?ght?d?veriof,mortand?rio?gage?l?ton.?2.uatisitimit?lansforion,?matand?trion,?eeze,t?and?mortzed,?gage,?and?and?sputand?frseies,?opertdemoliwhety?stherdis?pry;?exi?onalitatudge?assessment?i?rce,value?of?jpriarmier?properlsience?arrefty?ound?use;?entalr?or?uation,?ng?sity?whether?problem;?qualhas?atus,?itorproperprdamage??ty?stght?operand?nature;?ty?usiocatried?s?lcase?lherwhetand??matactch;?ualby?i?more