Linux & Windows Network Audit CLI

/* Linux Network */

arp - table
ip neigh - show neighbors devices
ip route - show current routes
route - routes intenet
ethtool eth0 - analysiss network card
tcpdump -i eth0 - show real-time packets
ip addr show - show local ip address
curl ifconfig.co - see Internet IP

sudo lsof -n -P -i +c 13 | grep 1900 - взнати хто слухає 1900 порт

ifconfig -a | grep ether | gawk '{print $2}' - show all MAC addr.
ip addr show eth0 - show MAC of selected device
ip link show - show all devices and only MACs

ip a - display all ip addressesd
ifconfig - display all network devices
ping ip - check quality of internet connection
host ip/domain - check hostname
dig ip - check all DNS records
traceroute - check route of internet connections
nslookup domain.com - display dns information

netstat -ant - display all tcp port listeners
netstat -a - list all sockets and ports
netstat -r - routing table map
netstat -i - interfaces (base command) packets
netstat -l - all active sockets
netstat -s - statistc info
netstat -p - sockets and their PIDS
netstat -tunap - all servers and establisheds
netstat -tulpn - only servers
netstat -anp
netstat -lptnu

nmcli device - Display network devices
nmcli device show eth0 - Show information about eth0 device
nmcli connection - Show network connections
nmcli connection up foo - Bring connection foo up
nmcli device wifi connect foo - Connect to wireless network foo

ss - statistics network
iptables -L -n - iptables firewall rules
cat /etc/resolv.conf - conf network
lsof -i - tasks network services

whoami - see logged users
systemctl restart network  - restart network service

/* traffic monitors */

vnstat
iftop
iftop -i usb0
sudo systemctl restart darkstat

https://www.tecmint.com/linux-network-bandwidth-monitoring-tools/

/* firewall */

iptables -A INPUT -s XX.XXX.XXX.XXX -j DROP
iptables -A INPUT -s 120.120.120.0/255.255.255.0 -j DROP
iptables -A INPUT -p tcp --dport ssh -s 120.120.120.120 -j DROP

/* hosts security */

nano /etc/hosts

Base: https://github.com/StevenBlack/hosts

Documentation:
https://www.opennet.ru/tips/2938_hosts_block_adblock_malware.shtml

/* DNS security */

nano /etc/resolv.conf
nmcli dev show | grep DNS

/* Windows Network */

whoami - see users
netstat -nao - display port listeners
tracert domain.com - route path betweeeen object and localhost
ping domain.com - know ip address of website
nslookup ip - resolve DNS info
hostname
arp -a - arp-table
route print - routing table
ipconfig/all - all network devices servers info
netstat -an - connections status
path
netsh wlan show profile
tasklist
net start - all services in system
schtasks - all sheduled tasks
netstat -ano - active tcp/udp