The Windows Command Line Room is part of the Cybersecurity 101 learning path in TryHackMe.
The room aims to teach users how to use cmd.exe, the default command-line interpreter in the Windows environment.
Topics covered include basic system information, network troubleshooting, file and disk management, as well as task and process management.
Commands covered include ver, systeminfo, ipconfig /all, netstat, type, tasklist, and taskkill.
The article provides step-by-step instructions on how to use these commands to gather information on OS version, hostname, physical address (MAC address), and running processes.
In addition, it shows how to find files, how to kill a process with a specific PID, how to shut down or restart the system, and how to abort a scheduled system shutdown.
For instance, to find processes related to notepad.exe, use tasklist /FI "imagename eq notepad.exe", while to obtain the contents of a file like flag.txt, use type.
To restart a system, simply use the command shutdown /r.
Finally, to abort a scheduled system shutdown, use the command shutdown /a.
This is a helpful guide for anyone looking to learn how to use cmd.exe and enhance their cybersecurity skills.