User:Cloudsec9/Command Line Reference
- Please NOTE: A green checkmark means the command seems to function, but does not mean it is fully tested and verified.
- BCOF - denotes a command returning "Bad command or filename", meaning it is not yet implemented.
Contents
A
| Command | Description | Working? (and notes) |
|---|---|---|
| ADDUSERS | Add or list users to/from a CSV file | X BCOF |
| ADmodcmd | Active Directory Bulk Modify | X BCOF |
| ARP | Address Resolution Protocol | ✔️ As of revision: 0.4.15 |
| ASSOC | Change file extension associations | ✔️ As of revision: 0.4.15 |
| AT | Schedule a command to run at a specific time | ✔️ As of revision: 0.4.15 |
| ATTRIB | Change file attributes | ✔️ As of revision: 0.4.15 |
B
| BCDBOOT | Create or repair a system partition | X BCOF |
| BCDEDIT | Manage Boot Configuration Data | X BCOF |
| BITSADMIN | Background Intelligent Transfer Service | X BCOF |
| BROWSTAT | Get domain, browser and PDC info | X BCOF |
C
| CACLS | Change file permissions | ✔️ As of revision: 0.4.15 |
| CALL | Call one batch program from another | ✔️ As of revision: 0.4.15 |
| CERTREQ | Request certificate from a certification authority | X BCOF |
| CERTUTIL | Utility for certification authority (CA) files and services | X Prints usage as of: 0.4.15 |
| CD | Change Directory - move to a specific Folder | ✔️ As of revision: 0.4.15 |
| CHANGE | Change Terminal Server Session properties | X BCOF |
| CHKDSK | Check Disk - check and repair disk problems | ✔️ As of revision: 0.4.15 |
| CHKNTFS | Check the NTFS file system | X BCOF |
| CHOICE | Accept keyboard input to a batch file | ✔️ As of revision: 0.4.15 |
| CIPHER | Encrypt or Decrypt files/folders | X BCOF |
| CleanMgr | Automated cleanup of Temp files, recycle bin | X BCOF |
| CLIP | Copy STDIN to the Windows clipboard | ✔️ As of revision: 0.4.15 |
| CLS | Clear the screen | ✔️ As of revision: 0.0.00 |
| CMD | Start a new CMD shell | / Does not open new window. Only shows cmd info. |
| CMDKEY | Manage stored usernames/passwords | X BCOF |
| COLOR | Change colors of the CMD window | ✔️ As of revision: 0.4.15 |
| COMP | Compare the contents of two files or sets of files | / Switches don't work |
| COMPACT | Compress files or folders on an NTFS partition | X BCOF |
| COMPRESS | Compress one or more files | X BCOF |
| CONVERT | Convert a FAT drive to NTFS | X BCOF |
| COPY | Copy one or more files to another location | ✔️ As of revision: 0.4.15 |
| Coreinfo | Show the mapping between logical & physical processors | X BCOF |
| CSCcmd | Client-side caching (Offline Files) | X BCOF |
| CSVDE | Import or Export Active Directory data | X BCOF |
D
| DATE | Display or set the date | ✔️ As of revision: 0.4.15 |
| DEFRAG | Defragment hard drive | X BCOF |
| DEL | Delete one or more files | ✔️ As of revision: 0.4.15 |
| DELPROF | Delete user profiles | X BCOF |
| DELTREE | Delete a folder and all subfolders | X BCOF |
| DevCon | Device Manager Command Line Utility | X BCOF |
| DIR | Display a list of files and folders | ✔️ As of revision: 0.4.15 |
| DIRQUOTA | File Server Resource Manager Disk quotas | X BCOF |
| DIRUSE | Display disk usage | X BCOF |
| DISKPART | Disk Administration | / Command in progress - loads but looks like usage As of revision: 0.4.15 |
| DISKSHADOW | Volume Shadow Copy Service | X BCOF |
| DISKUSE | Show the space used in folders | X BCOF |
| DNSCMD | Manage DNS servers | X BCOF |
| DOSKEY | Edit command line, recall commands, and create macros | / Tag: /history is ignored As of revision: 0.4.15 |
| DriverQuery | Display installed device drivers | X BCOF |
| DSACLs | Active Directory ACLs | X BCOF |
| DSAdd | Add items to active directory (user group computer) | X BCOF |
| DSGet | View items in active directory (user group computer) | X BCOF |
| DSQuery | Search for items in active directory (user group computer) | X BCOF |
| DSMod | Modify items in active directory (user group computer) | X BCOF |
| DSMove | Move an Active directory Object | X BCOF |
| DSRM | Remove items from Active Directory | X BCOF |
| Dsmgmt | Directory Service Management | X BCOF |
E
| ECHO | Display message on screen | ✔️ As of revision: 0.4.15 |
| ENDLOCAL | End localisation of environment changes in a batch file | ? Gives no missing command but no output |
| ERASE | Delete one or more files | ✔️ As of revision: 0.4.15 |
| EVENTCREATE | Add a message to the Windows event log | ✔️ As of revision: 0.4.15 |
| EXIT | Quit the current script/routine and set an errorlevel | ✔️ As of revision: 0.4.15 |
| EXPAND | Uncompress CAB files | ✔️ As of revision: 0.4.15 |
| EXPLORER | Open Windows Explorer | ✔️ As of revision: 0.4.15 |
| EXTRACT | Uncompress CAB files | X BCOF |
F
| FC | Compare two files | X BCOF |
| FIND | Search for a text string in a file | ✔️ As of revision: 0.4.15 |
| FINDSTR | Search for strings in files | ✔️ As of revision: 0.4.15 |
| FLTMC | Manage MiniFilter drivers | "Failed to list the filters" As of revision: 0.4.15 |
| FOR /F | Loop command: against a set of files | ✔️ As of revision: 0.4.15 |
| FOR /F | Loop command: against the results of another command | ✔️ As of revision: 0.4.15 |
| FOR | Loop command: all options Files, Directory, List | ✔️ As of revision: 0.4.15 |
| FORFILES | Batch process multiple files | X BCOF |
| FORMAT | Format a disk | prints usage, but does it work? As of revision: 0.4.15 |
| FREEDISK | Check free disk space | X BCOF |
| FSUTIL | File and Volume utilities | ✔️ As of revision: 0.4.15 |
| FTP | File Transfer Protocol | ✔️ As of revision: 0.4.15 |
| FTYPE | File extension file type associations | X BCOF |
G
| GETMAC | Display the Media Access Control (MAC) address | X BCOF |
| GOTO | Direct a batch program to jump to a labelled line | ✔️ As of revision: 0.4.15 |
| GPRESULT | Display Resultant Set of Policy information | X BCOF |
| GPUPDATE | Update Group Policy settings | X BCOF |
H
| HELP | Online Help | X Prints usage as of: 0.4.15 |
| HOSTNAME | Display the host name of the computer | ✔️ As of revision: 0.4.15 |
I
| iCACLS | Change file and folder permissions | X BCOF |
| IEXPRESS | Create a self extracting ZIP file archive | X BCOF |
| IF | Conditionally perform a command | ✔️ As of revision: 0.4.15 |
| IFMEMBER | Is the current user a member of a group | X BCOF |
| IPCONFIG | Configure IP | ✔️ As of revision: 0.4.15 |
| INUSE | Replace files that are in use by the OS | X BCOF |
L
| LABEL | Edit a disk label | ✔️ As of revision: 0.4.15 |
| LGPO | Local Group Policy Object utility | X BCOF |
| LODCTR | Load PerfMon performance counters | ? no error but no output As of revision: 0.4.15 |
| LOGMAN | Manage Performance Monitor logs | X BCOF |
| LOGOFF | Log a user off | ✔️ As of revision: 0.4.15 |
| LOGTIME | Log the date and time in a file | X BCOF |
M
| MAKECAB | Create .CAB files | X BCOF |
| MAPISEND | Send email from the command line | X BCOF |
| MBSAcli | Baseline Security Analyzer | X BCOF |
| MEM | Display memory usage | X BCOF |
| MD | Create new folders | ✔️ As of revision: 0.4.15 |
| MKLINK | Create a symbolic link (linkd) | Displays usage As of revision: 0.4.15 |
| MODE | Configure a system device COM/LPT/CON | ✔️ As of revision: 0.4.15 |
| MORE | Display output, one screen at a time | ✔️ As of revision: 0.4.15 |
| MOUNTVOL | Manage a volume mount point | X BCOF |
| MOVE | Move files from one folder to another | ✔️ As of revision: 0.4.15 |
| MOVEUSER | Move a user from one domain to another | X BCOF |
| MSG | Send a message | X BCOF |
| MSIEXEC | Microsoft Windows Installer | ✔️ As of revision: 0.4.15 |
| MSINFO32 | System Information | X BCOF |
| MSTSC | Terminal Server Connection (Remote Desktop Protocol) | ✔️ As of revision: 0.4.15 |
N
| NET | Manage network resources | ✔️ As of revision: 0.4.15 |
| NETDOM | Domain Manager | X BCOF |
| NETSH | Configure Network Interfaces, Windows Firewall & Remote access | runs but nothing functional As of revision: 0.4.15 |
| NBTSTAT | Display networking statistics (NetBIOS over TCP/IP) | X BCOF |
| NETSTAT | Display networking statistics (TCP/IP) | ✔️ As of revision: 0.4.15 |
| NLSINFO | Display locale information (reskit). | X BCOF |
| NLTEST | Network Location Test (AD) | X BCOF |
| NOW | Display the current Date and Time | X BCOF |
| NSLOOKUP | Name server lookup | interactive not implemented, but command line parameters work As of revision: 0.4.15 |
| NTBACKUP | Backup folders to tape | X BCOF |
| NTDSUtil | Active Directory Domain Services management | X BCOF |
| NTRIGHTS | Edit user account rights | X BCOF |
| NVSPBIND | Modify network bindings | X BCOF |
O
| Command | Description | Working? (and notes) |
|---|---|---|
| OPENFILES | Query or display open files | X BCOF |
P
| PATH | Display or set a search path for executable files | ✔️ As of revision: 0.4.15 |
| PATHPING | Trace route plus network latency and packet loss | X BCOF |
| PAUSE | Suspend processing of a batch file and display a message | ✔️ As of revision: 0.4.15 |
| PERMS | Show permissions for a user | X BCOF |
| PERFMON | Performance Monitor | X BCOF |
| PING | Test a network connection | ✔️ As of revision: 0.4.15 |
| POPD | Return to a previous directory saved by PUSHD | ✔️ As of revision: 0.4.15 |
| PORTQRY | Display the status of ports and services | X BCOF |
| POWERCFG | Configure power settings | X BCOF |
| Print a text file | X BCOF | |
| PRINTBRM | Print queue Backup/Recovery | X BCOF |
| PRNCNFG | Configure or rename a printer | X BCOF |
| PRNMNGR | Add, delete, list printers and printer connections | X BCOF |
| ProcDump | Monitor an application for CPU spikes | X BCOF |
| PROMPT | Change the command prompt | ✔️ As of revision: 0.4.15 |
| PsExec | Execute process remotely | X BCOF |
| PsFile | Show files opened remotely | X BCOF |
| PsGetSid | Display the SID of a computer or a user | X BCOF |
| PsInfo | List information about a system | X BCOF |
| PsKill | Kill processes by name or process ID | X BCOF |
| PsList | List detailed information about processes | X BCOF |
| PsLoggedOn | Who's logged on (locally or via resource sharing) | X BCOF |
| PsLogList | Event log records | X BCOF |
| PsPasswd | Change account password | X BCOF |
| PsPing | Measure network performance | X BCOF |
| PsService | View and control services | X BCOF |
| PsShutdown | Shutdown or reboot a computer | X BCOF |
| PsSuspend | Suspend processes | X BCOF |
| PUSHD | Save and then change the current directory | ✔️ As of revision: 0.4.15 |
Q
| QGREP | Search file(s) for lines that match a given pattern | X BCOF |
| Query Process / QPROCESS | Display processes | X BCOF |
| Query Session / QWinsta | Display all sessions (TS/Remote Desktop) | X BCOF |
| Query TermServer /QAppSrv | List all servers (TS/Remote Desktop) | X BCOF |
| Query User / QUSER | Display user sessions (TS/Remote Desktop) | X BCOF |
R
| RASDIAL | Manage RAS connections | X BCOF |
| RASPHONE | Manage RAS connections | X BCOF |
| RECOVER | Recover a damaged file from a defective disk | X BCOF |
| REG | Registry: Read, Set, Export, Delete keys and values | ✔️ As of revision: 0.4.15 |
| REGEDIT | Import or export registry settings | ✔️ As of revision: 0.4.15 |
| REGSVR32 | Register or unregister a DLL | ✔️ As of revision: 0.4.15 |
| REGINI | Change Registry Permissions | X BCOF |
| REM | Record comments (remarks) in a batch file | ✔️ As of revision: 0.4.15 |
| REN | Rename a file or files | ✔️ As of revision: 0.4.15 |
| REPLACE | Replace or update one file with another | ✔️ As of revision: 0.4.15 |
| Reset Session | Delete a Remote Desktop Session | X BCOF |
| RD | Delete folder(s) | ✔️ As of revision: 0.4.15 |
| RMTSHARE | Share a folder or a printer | X BCOF |
| ROBOCOPY | Robust File and Folder Copy | X BCOF |
| ROUTE | Manipulate network routing tables | ✔️ As of revision: 0.4.15 |
| RUN | RUN commands | X BCOF |
| RUNAS | Execute a program under a different user account | X BCOF |
| RUNDLL32 | Run a DLL command (add/remove print connections) | no output but not bad command As of revision: 0.4.15 |
S
| SC | Service Control | ✔️ As of revision: 0.4.15 |
| SCHTASKS | Schedule a command to run at a specific time | No error but does nothing As of revision: 0.4.15 |
| SET | Display, set, or remove session environment variables | ✔️ As of revision: 0.4.15 |
| SETLOCAL | Control the visibility of environment variables | No help with /? function unknown As of revision: 0.4.15 |
| SetSPN | Edit Service Principal Names | X BCOF |
| SETX | Set environment variables | X BCOF |
| SFC | System File Checker | X BCOF |
| SHARE | List or edit a file share or print share | X BCOF |
| ShellRunAs | Run a command under a different user account | X BCOF |
| SHIFT | Shift the position of batch file parameters | ✔️ As of revision: 0.4.15 |
| SHORTCUT | Create a windows shortcut (.LNK file) | X BCOF |
| SHUTDOWN | Shutdown the computer | |
| SIGCHECK | Display file version no. VirusTotal status & timestamp | X BCOF |
| SLEEP | Wait for x seconds | X BCOF |
| SLMGR | Software Licensing Management (Vista/2008) | X BCOF |
| SORT | Sort input | ✔️ As of revision: 0.4.15 |
| START | Start a program, command or batch file | ✔️ As of revision: 0.4.15 |
| STRINGS | Search for ANSI and UNICODE strings in binary files | X BCOF |
| SUBINACL | Edit file and folder Permissions, Ownership and Domain | X BCOF |
| SUBST | Associate a path with a drive letter | ✔️ As of revision: 0.4.15 |
| SYSMON | Monitor and log system activity to the Windows event log | X BCOF |
| SYSTEMINFO | List system configuration | X BCOF |
T
| TAKEOWN | Take ownership of a file | X BCOF |
| TASKLIST | List running applications and services | X BCOF |
| TASKKILL | End a running process | ✔️ As of revision: 0.4.15 |
| TELNET | Communicate with another host using the TELNET protocol | Complains but loads As of revision: 0.4.15 |
| TIME | Display or set the system time | ✔️ As of revision: 0.4.15 |
| TIMEOUT | Delay processing of a batch file/command | ✔️ As of revision: 0.4.15 |
| TITLE | Set the window title for a CMD.EXE session | ✔️ As of revision: 0.4.15 |
| TLIST | Task list with full path | X BCOF |
| TOUCH | Change file timestamps | X BCOF |
| TRACERT | Trace route to a remote host | ✔️ As of revision: 0.4.15 |
| TREE | Graphical display of folder structure | ✔️ As of revision: 0.4.15 |
| TSDISCON | Disconnect a Remote Desktop Session | X BCOF |
| TSKILL | End a running process | X BCOF |
| TSSHUTDN | Remotely shut down or reboot a terminal server | X BCOF |
| TYPE | Display the contents of a text file | ✔️ As of revision: 0.4.15 |
| TypePerf | Write performance data to a log file | X BCOF |
| TZUTIL | Time Zone Utility | X BCOF |
V
| VER | Display version information | ✔️ As of revision: 0.4.15 |
| VERIFY | Verify that files have been saved | ✔️ As of revision: 0.4.15 |
| VMConnect | Connect to a Hyper-V Virtual Machine | X BCOF |
| VOL | Display a disk label | ✔️ As of revision: 0.4.15 |
| VSSADMIN | Display volume shadow copy backups and shadow copy writers/providers. | X BCOF |
W
| W32TM | Time Service | X BCOF |
| WAITFOR | Wait for or send a signal | X BCOF |
| WBADMIN | Windows Backup Admin | X BCOF |
| WECUTIL | Windows Event Collector Utility | X BCOF |
| WEVTUTIL | Clear event logs, enable/disable/query logs | X BCOF |
| WHERE | Locate and display files in a directory tree | X BCOF |
| WHOAMI | Output the current UserName and domain | ✔️ As of revision: 0.4.15 |
| WINDIFF | Compare the contents of two files or sets of files | X BCOF |
| WINRM | Windows Remote Management | X BCOF |
| WINRS | Windows Remote Shell | X BCOF |
| WMIC | WMI Commands | runs but "Command line not supported" As of revision: 0.4.15 |
| WPEUTIL | Run WinPE commands | X BCOF |
| WPR | Windows Performance Recorder | X BCOF |
| WUAUCLT | Windows Update | X BCOF |
X
| Command | Description | Working? (and notes) |
|---|---|---|
| XCACLS | Change file and folder permissions | X BCOF |
| XCOPY | Copy files and folders | ✔️ As of revision: 0.4.15 |
| :: | Comment / Remark | ✔️ As of revision: 0.4.15 |
References
LIST BY: SS64
