Fake Hide'Demo Netstat(ALLyeSNO)

用法跟netstat一样：

fhns -na

fhns -rs

需要隐藏的ip 以及 端口修改bat里面的
type netstat.tmp|%systemroot%/system32/findstr.exe /v "/<127.0.0.1/> 3389"

这是Fake Hide的demo made by ALLyeSNO

执行的结果 隐藏了 127.0.0.1 的ip地址 以及 3389端口

附件: fhns.rar



下面是修改版的 2005-1-21

@echo off
rem this is fh's demo
rem test in winxp by ALLyeSNO
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%/system32/findstr.exe "["]">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%/system32/findstr.exe " [0-9] ">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%/system32/findstr.exe /i " ^a ^b ^c ^d ^e ^f ^g ^h ^i ^j ^k ^l ^m ^n ^o ^p ^q ^r ^s ^t ^u ^v ^w ^x ^y ^z ">nul&&goto help
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%/system32/findstr.exe /i " /<-[ers] ">nul&&goto ers
echo %1 %2 %3 %4 %5 %6 %7 %8 %9|%systemroot%/system32/findstr.exe /i " /<-[anop] ">nul&&goto ano
goto help
:ers
%systemroot%/system32/netstat.exe %1 %2 %3 %4 %5 %6 %7 %8 %9
goto end
:ano
%systemroot%/system32/netstat.exe %1 %2 %3 %4 %5 %6 %7 %8 %9>netstat.tmp
type netstat.tmp|%systemroot%/system32/findstr.exe /v "/<127.0.0.1/> 4000"
goto end
:help
rem goto end
echo.
echo Displays protocol statistics and current TCP/IP network connections.
echo.
echo NETSTAT [-a] [-e] [-n] [-o] [-s] [-p proto] [-r] [interval]
echo.
echo  -a            Displays all connections and listening ports.
echo  -e            Displays Ethernet statistics. This may be combined with the -s
echo                option.
echo  -n            Displays addresses and port numbers in numerical form.
echo  -o            Displays the owning process ID associated with each connection.
echo  -p proto      Shows connections for the protocol specified by proto; proto
echo                may be any of: TCP, UDP, TCPv6, or UDPv6.  If used with the -s
echo                option to display per-protocol statistics, proto may be any of:
echo                IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.
echo  -r            Displays the routing table.
echo  -s            Displays per-protocol statistics.  By default, statistics are
echo                shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;
echo                the -p option may be used to specify a subset of the default.
echo  interval      Redisplays selected statistics, pausing interval seconds
echo                between each display.  Press CTRL+C to stop redisplaying
echo                statistics.  If omitted, netstat will print the current
echo                configuration information once.
echo.
echo.
:end