Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 75 guests online
 
Advertisement

You are here: Home arrow Resourcesarrow Tutorialsarrow Help with basic command prompt
EH-Net
May 20, 2013, 08:28:48 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Help with basic command prompt  (Read 7756 times)
0 Members and 1 Guest are viewing this topic.
JayOni
Newbie
*
Offline Offline

Posts: 21



View Profile
« on: May 27, 2011, 07:45:28 PM »

First off I would like to say that I am still a student and just recently I just started learning how to use the cmd prompt and I hope nobody get mad at me for asking such a simple question.

I'm looking at PING, when I do PING <IP address> why does the same exact thing show as PING -a, <IP address>? I know -a is to resolve addresses to host names but im a little confused as to what that really means and why it would look like a normal PING.

Also I'd like to know what would be a point of a continuous ping using -t unless its an form of attack on a workstation. (And what would be the syntx to stop it the help file in my cmd promt says "to stop type control-c" would i type PING -c <ip address>?
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #1 on: May 27, 2011, 08:37:36 PM »

Hi JayOni.

First, ping -a will give you a hostname that an IP resolves to, if the IP is registered in DNS, or a nameservice.  If not, you'll get the same address returned as a result, similar to what you get without the -a.  So, it's useful if you have an IP you're looking at, and want to see what hostname belongs to the address.  Say you review a log, and see an IP regularly hits your firewall.  You might try -a, to see if you can determine the host.  Subsequently, in a test, you might ping sweep a range of addresses, to see which are responding.  You might then try to see what the ones are, that respond to the initial sweep.

Next, -t is handy if you're doing connectivity testing.  For instance, if you suspect you have connection issues, or want to see if there's packet loss, etc, you might run a continuous ping, to see if you are not getting responses to all your ping packets (meaning it either dropped your outbound packets, or the return packets, somewhere.

There are other scenarios where you might use it, but that's one example.

As for stopping it, the combination of ctrl-c essentially stops the running ping process, in it's tracks.  Like 'break'
« Last Edit: May 27, 2011, 08:40:37 PM by hayabusa » Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
JayOni
Newbie
*
Offline Offline

Posts: 21



View Profile
« Reply #2 on: May 27, 2011, 08:43:08 PM »

ah thanks for helping me out very useful Smiley. my classes are 5 weeks long and i couldnt afford to wait till tuesday (we got monday off) im constantly studying so i appreciate the timely response  Grin
Logged
JayOni
Newbie
*
Offline Offline

Posts: 21



View Profile
« Reply #3 on: May 27, 2011, 08:49:23 PM »

May you could answer another noobish question, and keep in mind im not looking for a how to guide but more of general understanding.

I've been learning about ports and stuff and know like 15 of the main ports, but i've sorta been wondering how people (mostly hackers i would suppose) gain access threw ports to your computer remotely I know you have to have the port open and they would probably run a port scanner on you or something to see which ones you got going but how do they access it from there (do they use the command prompt or a 3rd party software)?
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #4 on: May 27, 2011, 09:01:57 PM »

A port that is open means there is some software or hardware device that is listening for connections. The way to "get in" is to exploit that software or hardware that is listening. Usually crappy code causes these problems with this software/hardware.

A very basic example:

You do a port scan and see that port 21 is open which commonly used for FTP. You then enumerate the service to try and figure out which software is running that FTP server....you determine that it is SuperCrappyFTP version 1.0 . Then, you dig around on exploit databases and find out that there is a known buffer overflow exploit for that version. The rest you can figure out on your own. But that is how a hacker would gain access through an FTP port.
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.07 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.