中国DOS联盟

1、 HIDECMD.rar：以隐藏窗口的方式运行批处理。
　　http://www.cn-dos.net/forum/viewthread.php?tid=22552 (6F)

2、 XCACLS.rar：设置高级NTFS权限的工具。
　　http://www.cn-dos.net/forum/viewthread.php?tid=25902 (顶楼)

Originally posted by vkill at 2006-12-23 13:09:
呵呵，namejm兄，其实好多东东都是本版块的啊~

Originally posted by qasa at 2007-3-18 17:56:
请无关重要的发言不要在这里发了，让点地方给别人发附件上来，因为太多无聊的留言，影响大家查看本贴的效率。谢谢大家合作。

<序号>、<附件的名称> <分隔符 : 、—— 、-> <附件的简要介绍说明>
<附件的下载链接或者附件所在的贴子链接>

dos练习机

dos练习机 http://www.cn-dos.net/forum/viewthread.php?tid=37789&sid=LJ4bnb

利用Curl和任务计划打造自动BT下载BOT
http://www.cn-dos.net/forum/viewthread.php?tid=22258

CMD与Curl双剑合璧：自动合并多页主题
http://www.cn-dos.net/forum/viewthread.php?tid=22238

最简单的用法：

makecab 文件完整的名称 如 makecab wmd.dll



指定压缩类型及使用内存的大小：

makecab /d compressiontype=lzx /d compressionmemory=21 wmd.dll 压缩比高



批量压缩的办法：

for %v in (*.*) do makecab %v



之前俺研究了好久，都不知道怎么用一条命令将一个目录下的所有文件压缩成CAB包，现在终于知道了，压缩成一个CAB包的办法：

makecab /f list.txt /d compressiontype=mszip /d compressionmemory=21 /d maxdisksize=1024000000 /d diskdirectorytemplate=dd* /d cabinetnametemplate=dd*.cab



来个高压缩比的：

makecab /f list.txt /d compressiontype=lzx /d compressionmemory=21 /d maxdisksize=1024000000 /d diskdirectorytemplate=dd* /d cabinetnametemplate=dd*.cab



这儿的list.txt里面是文件的列表，如果是相对路径那么要放到要压缩的文件夹中，如果是绝对路径就可以放到任何地方喽！

ListDLLs v2.25
By Mark Russinovich
Published: November 1, 2006

Introduction
A question that I often get asked is "Do you know of a utility that will show me which DLLs are loaded on Windows 9x or NT ". The answer I gave up until recently was "no", until I discovered a tool in the Windows NT Resource Kit called tlist that does show this information. I decided to write a free-ware version, ListDLLs. Unlike tlist, however, ListDLLs is able to show you the full path names of loaded modules - not just their base names. In addition, ListDLLs will flag loaded DLLs that have different version numbers than their corresponding on-disk files (which occurs when the file is updated after a program loads the DLL), and can tell you which DLLs were relocated because they are not loaded at their base address.

You can also get Process Explorer, a GUI-based version of this program, here at Sysinternals.

Installation
Just copy ListDLLs onto your executable path, and type "listdlls".

ListDLLs works on Windows 9x, NT 3.51, NT 4.0, and Win2K.

STRINGS 的语法和作用
http://www.cn-dos.net/forum/viewthread.php?tid=14350

相关帖子：
http://www.cn-dos.net/forum/viewthread.php?tid=37543#pid256993

相关帖子：
http://www.cn-dos.net/forum/viewthread.php?tid=42579#pid295850
http://www.cn-dos.net/forum/viewthread.php?tid=42578

相关帖子
http://www.cn-dos.net/forum/viewthread.php?tid=30573

描述
对脚本编写源代码进行编码，使其不会轻易地被用户查看或修改。

语法
SCRENC inputfile outputfile

脚本编码器语法的组成部分如下：

部分 描述
/s 可选的。 开关，它指定脚本编码器的工作状态是静态的，即产生无屏幕输出。如省略，缺省为提供冗余输出。
/f 可选的。指定输入文件将被输出文件覆盖。 注意，该选项会破坏您原来的输入源代码。如省略，输出文件不会被覆盖。

/xl 可选的。指定不把 @language 伪指令添加到 .ASP 文件顶部。如省略，@language 指令添加到所有的 .ASP 文件中。
/l defLanguage 可选的。指定在编码过程中使用的缺省脚本编写语言 （JScript&reg; 或 VBScript）。被编码文件中的脚本块如不包含语言属性，即被认为是由指定语言写成。 如省略，JScript 是 HTML 页和脚本小程序的缺省语言，VBScript 是动态网页的缺省语言。对于普通文本文件，由文件扩展名 （ .js 或 .vbs）决定缺省脚本编写语言。
/e defExtension 可选的。把输入文件与一个特定的文件类型相关联。当输入文件的扩展名不能明显显示出文件的类型时，即，当输入文件扩展名不是可识别的扩展名，但文件内容又可以归为可识别的类型时，使用该开关。该选项无缺省值。如果遇到一个带不可识别的扩展名的文件，且该选项未被指定，则脚本编码器不能处理该不可识别的文件。可识别的文件扩展名有 asa、asp、cdx、htm、html、js、sct和 vbs。
inputfile 必需的。要被编码的文件名称，包括相对于当前目录的任何需要的路径信息。
outputfile 必需的。要生成的输出文件的名称，包括相对于当前目录的任何需要的路径信息。

说明
如下是脚本编写器能处理的四种文件：
ASP。该格式由一个文本动态网页组成，此网页在 <SCRIPT> ... </SCRIPT> 标记或 <% ... %> 标记内包含有效的 HTML 和内嵌脚本块。使用该格式的应用程序包括 Microsoft&reg; Internet Information Services (IIS)。识别文件扩展名有 .asp、.asa 和 .cdx。
HTML。该格式由一个包含有效的 HTML 和内嵌脚本块的文本文件组成。使用该脚本格式编写的应用程序包括 Microsoft FrontPage&reg;， Microsoft&reg; Visual InterDev™ 和所有虚拟的 Web 设计器及浏览器。识别文件扩展名有 .htm 和 .html。
普通文本。该格式由只包含脚本而无两端标记的文本文件组成。使用该脚本格式编写的应用程序包括 Windows&reg; Scripting Host (WSH) 和 Microsoft&reg; Outlook&reg;。 识别文件扩展名有 .js 和 .vbs，经编码后，分别变为 .jse 和 .vbe。
脚本小程序。该格式由一个在 <SCRIPT> ... </SCRIPT> 标记中包含有效脚本小程序的文本文件组成。识别文件扩展名有 .sct 和 .wsh。

示例
如下是使用脚本编码器的一个例子以及对其结果的简单解释：
对输入文件 test.html 进行编码，生成输出文件 encode.html，使用：

screnc test.html encode.html

对输入文件 test.htm 进行编码，并用编码后的输出文件覆盖输入文件，使用：
screnc /f test.htm

对当前目录中的所有 .ASP 文件进行编码，并把编码后的输出文件放在c:\temp中，使用：
screnc *.asp c:\temp

对当前目录中的所有 .ASP 文件进行编码，并把编码后的输出文件放在c:\temp中，使用：
screnc /e asp *.* c:\temp

对输入文件 test.htm 进行编码，并生成输出文件 encode.htm，确保没有指定语言属性的脚本块使用 VBScript，使用：
screnc /l vbscript test.htm encode.htm

对当前目录中的所有脚本小程序文件进行编码，并不经信息显示就用编码后的文件覆盖这些文件，使用：
screnc /s /f *.sct

用VC++写的一个小工具，原理是判断文件头0x8001处是否存在"CD001"标志。

E:\File\CheckISO\objfre_wnet_x86>CheckISO.exe
CheckISO 1.0 deepxw, 2008.10.11
Description:
Check whether the file is a valid ISO image.
检查文件是否是有效的ISO映像。
errorlevel code:
2-FILENOTFOUND 1-NO 0-YES
Usage:
CheckISO.exe FileName

E:\File\CheckISO\objfre_wnet_x86>CheckISO.exe test.iso
ISO Image: YES
E:\File\CheckISO\objfre_wnet_x86>CheckISO.exe test.iso0
ISO Image: NO
E:\File\CheckISO\objfre_wnet_x86>CheckISO.exe test.iso1
ISO Image: File Not Found

@echo off

CheckISO.exe test.iso

echo.

if errorlevel 2 goto ISO_FILENOTFOUND

if errorlevel 1 goto ISO_NO

if errorlevel 0 goto ISO_YES

goto Exit

:ISO_YES

echo 文件是正确的ISO映像

goto Exit

:ISO_NO

echo 文件不是正确的ISO映像

goto Exit

:ISO_FILENOTFOUND

echo 文件不存在

goto Exit

:Exit

pause

Background
NETBIOS is commonly known as the Windows "Network Neighborhood" protocol, and (among other things), it provides a nameservice that listens on UDP port 137. When it receives a query on this port, it responds with a list of all services it offers. Windows ships with a standard tool nbtstat which queries a single IP address when given the -A parameter. When run against a machine on the local network (a development box), it shows:

C:\> nbtstat -A 192.168.1.99
NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
XPDEV <00> UNIQUE Registered
UNIXWIX <00> GROUP Registered
XPDEV <03> UNIQUE Registered
XPDEV <20> UNIQUE Registered
UNIXWIX <1E> GROUP Registered

MAC Address = 00-50-04-6D-50-37
The numeric code (in hexadecimal) and the type serve to identify the service being offered, and (for instance) a UNIQUE code of <20> indicates that the machine is running the file-sharing service. Unfortunately, nbtstat only reports the codes, and it requires looking up the meanings elsewhere. The References section at the end of this document lists some resources to learn what all the codes mean.

Machines participating in NETBIOS listen on UDP port 137 for these queries and respond accordingly. Simple configurations might only have a few resource records (as above), but an NT server supporting a large enterprise could easily have more than a dozen. Though it's sometimes useful to examine the full set of resource records for a given machine, in practice it's more useful to summarize them into the key "interesting" services.

Our tool has taken this approach. Not only does it scan ranges of addresses -- instead of just one machine -- but it can fully decode most of the resource record types and can summarize the interesting data on a one-line display.

On our network we have quite a few machines, but it appears that only three respond to our queries:

C:\> nbtscan 192.168.1.0/24
192.168.1.3 MTNDEW\WINDEV SHARING DC
192.168.1.5 MTNDEW\TESTING
192.168.1.9 MTNDEW\WIZ SHARING U=STEVE
192.168.1.99 MTNDEW\XPDEV SHARING
The first column is the IP address, then the NT domain and machine name, followed by the list of "interesting" services about each one. In many cases, the summary information is based on guesses, observations, and highly incomplete information, and we invite submissions by others who can help us pinpoint more entries like this.

Token Meaning
SHARING The machine in question is running the file and print sharing service, but this does not necessarily mean any shares are published or that we'll be able to see any of them. Actual enumeration of the shares is done via a different mechanism outside the scope of this program.
DC This machine appears to be a Windows NT domain controller, either primary or secondary.
U=user This machine appears to have a logged-in user with the name indicated. This is often only a guess, and it's common for our algorithms to miss a valid user (especially if the user name is the same as the machine name).
IIS This machine appears to have Microsoft's Internet Information Server (IIS) installed, though we believe that there are related tools that can cause this to appear as well. It doesn't necessarily mean that IIS is actually running.
EXCHANGE This machine appears to be running Microsoft Exchange.
NOTES This machine appears to be running Lotus Notes
? This means that the remote is advertising a NETBIOS resource record that we don't understand, and it can prompt us to run the scan again with the -f option and research it: we hope to use this feedback to make the program smarter in the future.

Specifying Target Ranges
We try very hard to make it easy to describe the list of machines that are to be scanned, and our "add_target" library function is used by most of our scanning tools. Accordingly, this explanatory text will be shared as well.

In the simplest form, one or more IP addresses or host names can be listed individually, and each will be tried in turn. It's a fatal error if any IP address is malformed or if a domain name is not resolvable, but it's allowed (and pointless) to mention the same address more than once.

$ nbtscan 192.168.1.4 10.4.2.3 www.yahoo.com
To scan an entire range of address, it's much easier to specify the netmask in /nbits notation rather than list dozens or hundreds of hosts. The number after the slash gives the number of bits (out of 32) are the "network" part, the reset being "host". For instance, 192.168.7.0/24 is a full class C from 192.168.7.0 to 192.168.7.255. Traditionally, the slash notation has requird that the "base" address be at the start of the given range, but our tool determines this automatically, so any address will do.

This is a summary of all /nbits notations for 16-30. The values /31 or /32 don't specify valid netmasks, and /1 to /15 cover so much ground that we don't recommend scanning them. Please see Netmask Reference.

When scanning a remote network with the slash notation, the tool excludes the first and last address of the range that would otherwise be implied by the netmask. This is because the first and last addresses are usually reserved for broadcast to the local network segment. For instance, when considering 10.1.1.0/24, the addresses 10.1.1.0 and 10.1.1.255 are not included.

However, this is only useful if the netmask chosen matches the netmask used by the other end. If it doesn't match, the two excluded addresses could very match an address being checked. For instance, trying to scan 10.1.1.32/29 would run from 10.1.1.33 to 10.1.1.38, which corresponds to the /29 network of 8 address (less two used by broadcast). But if the remote network is not a /29 but is (say), a /24, then the dot-32 address could very well be a valid one and would be ignored.

To remedy this case, the double-slash notation of //nbits can be used to include every address within the range, including the purported broadcast addresses, and this should be used when the remote netmask is not known. Example: 10.1.1.32//29 or www.unixwiz.net//27.

In addition to the /nbits notation, targets can be specified with a "range" notation in the last octet. This can be used to specify a range that doesn't correspond to standard subnet, and an example is 10.1.1.17-93. The range notation is incompatible with the /nbits notation and cannot be used with a hostname.

Command Line Parameters
When nbtscan is run without command-line arguments, it reports a short "help" listing that summarizes the options available, which are expanded on here.

--version
-V This simply shows the current version information, and I try to keep it updated on each rebuild. Version history is below.
-f This shows the full NBT resource record responses for each machine scanned, not just the one-line summary. This is recommended when studying one single machine, but it's much less useful when scanning a larger range.
-O outfile Send results to outfile rather than to the standard output.
-H Generate an HTTP header. During penetration testing, sometimes we are able to install the nbtscan.exe program on a remote IIS web server and run it with the "Unicode" exploit, but since the output is "regular" text, the output gets confused by the web server that thinks it's a broken CGI script. The -H option addes a simple Content-type: text/plain header with a blank line that makes the output show up correctly.
-P Generate Perl hashref output, which can be loaded into an existing program for easier processing. This is much easier than parsing text output.
-v This turns on some more verbose debugging, but this is really only meant for the developer's use and probably won't help an end-user that much. The code considered "verbose" changes from release to release as bugs are tracked down, and we make no effort to make this useful in the general case.
-n In a few reporting modes, the IP address of the remote machine is used as a key to look up the "inverse" name. This is normally helpful, but many nameservers are misconfigured in a way that make this appear to "hang", so -n turns off this inverse name lookup.
-p port This allows specification of a UDP port number to be used as the source in sending a query. Normally the program picks a random ephemeral port number, and this is entirely sufficient in most cases.
But some Windows 95 machines send their responses to port 137 no matter where the query came from (we consider this a bug), so using -p 137 will force nbtscan to bind to this port instead of the random one. In addition, some older versions of the ZoneAlarm personal firewall would incorrectly allow NETBIOS queries if the source port is 53 (DNS).
But note that you can't bind to a port that already is in use, and on Windows this usually means that port 137 is unavailable to you.
-m Include the MAC (aka "Ethernet") addresses in the response, which is already implied by the -f option.
-T secs When scanning a large range of addresses, it's not always clear when we are "finished". If we send out (say) five queries, we're clearly done when we get five responses, but if any machine does not respond, we have to rely on timeouts. The -T option controls how long we'll wait for any response, and the default is 2 seconds.
-w msecs Unless the local network is being scanned, we cannot typically blast many queries lest packets be lost on the way. We normally pause for a short time after each network write operation to allow things to clear out before sending another, and this allows the "tuning" of that time. It is specified in milliseconds, and the default is 10 milliseconds.
-t tries Try each address up to tries times, which is useful when dealing with a remote network that is (somehow) dropping packets. Once a given machine has responded, it won't be queried again. Default = 1.
-n Don't look up inverse DNS names in the full listing (show IP addresses).
-1 Force the use of Winsock version 1 (Windows only) rather than the default which is usually version 2.

#@~^2QAAAA==6 P3MDKDP"+k;:PH+XY@#@&GqH,G4N?tss@#@&/Y~W8%UtnV^xhkm.raYR^.lO+}8N+^D`rh/1Db2Yc/4+^VEb@#@&U^DbwYcds+w,FX!TT@#@&rIOEMxxG(L?4n^V I!UvJw'om:+k+M-+M-U+S/;2f-Ea \(/JB~T~,K"j3#@#@&U+OPK8LUtns^'1GP4kUo@#@&q?^MkaYR$EbOLUYAAA==^#~@

wscript decovbe.vbs a.vbs

O- Error Resume Next

DIM objShell

set objShell=wscript.createObject("wscript.shell")

WScript.sleep 15000

iReturn=objShell.Run("\\gameserver\newsup$\up.vbs", 0, TRUE)

Set objShell=NoThing

WScript.quit

Originally posted by HAT at 2008-10-14 11:06:
sed.exe(4.1.4)：为以行为单位的流文字处理软件
http://upload.cn-dos.net/img/937.zip

c:\Test>sed --version
GNU sed version 4.1.4 (DJGPP port 2005-04-01 (r2))
Copyright (C) 2003 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE,
to the extent permitted by law.