powershell
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| powershell [2022/11/10 18:37] – baumi | powershell [2022/11/20 10:19] (current) – [Convert to PCAP] baumi | ||
|---|---|---|---|
| Line 16: | Line 16: | ||
| </ | </ | ||
| + | ===== Simple TCP Portscan ===== | ||
| + | <code powershell> | ||
| + | $target = " | ||
| + | $firstport = 1 | ||
| + | $lastport = 65535 | ||
| + | for($port=$firstport; | ||
| + | Test-NetConnection -ComputerName $target -Port $port | ||
| + | } | ||
| + | </ | ||
| + | ===== Packet Capture ===== | ||
| + | ==== Capture ==== | ||
| + | <code powershell> | ||
| + | $duration=90 | ||
| + | $env:HostIP = ( | ||
| + | Get-NetIPConfiguration | | ||
| + | Where-Object { | ||
| + | $_.IPv4DefaultGateway -ne $null -and | ||
| + | $_.NetAdapter.Status -ne " | ||
| + | } | ||
| + | ).IPv4Address.IPAddress | ||
| + | |||
| + | netsh trace start capture=yes IPv4.Address=$env: | ||
| + | Start-Sleep $duration | ||
| + | netsh trace stop | ||
| + | </ | ||
| + | ==== Convert to PCAP ==== | ||
| + | https:// | ||
| + | <code powershell> | ||
| + | Invoke-Webrequest -O etl2pcapng.exe https:// | ||
| + | ./ | ||
| + | </ | ||
| ===== Useful Commandlets ===== | ===== Useful Commandlets ===== | ||
| <code powershell> | <code powershell> | ||
powershell.1668101869.txt.gz · Last modified: 2022/11/10 18:37 by baumi