FIREWALL COMMANDS

Evade Windows Anti-Virus:

Shelter https://www.shellterproject.com/download/ can inject  shellcode into legit 32-Bit Executables and is likely to not get  detected.

=============

WINDOWS

=============

CMD:

  netsh advfirewall firewall show rule name=all

PS: 

  Get-NetFirewallRule

  Show-FirewallRule
 

Disable Firewall on Windows 7 via CMD:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurentControlSet\Control\Terminal Server"  /v fDenyTSConnections /t REG_DWORD /d 0 /f
 

Disable Firewall on Windows 7 via Powershell:

powershell.exe  -ExecutionPolicy Bypass -Command 'Set-ItemProperty -Path  "HKLM:\System\CurrentControlSet\Control\Terminal Server" -Name  "fDenyTSConnections" –Value'`
 

Add File Path to Exclude From Windows Defender
Set-MpPreference -ExclusionPath "C:\Windows\System32\spool\drivers\color"
 

Disable Windows Defender
Set-MpPreference -DisableRealtimeMonitoring $True

==============

LINUX

==============

IP TABLES:

List Rules;

  iptables -L -n

Delete Rule;

  iptables -D INPUT -m conntrack --ctstate INVALID -j DROP

Delete Rule By Line Number;

1.) Get Line Numbers

  iptables -L --line-numbers

2.) Delete the Line

  iptables -D INPUT 3

Delete All Input Rules;

  iptables -F INPUT

Delete All Rules;

  iptables -F

Allow All Traffic;

  iptables -P INPUT ACCEPT

  iptables -P FORWARD ACCEPT
 iptables -P OUTPUT ACCEPT

Add Rule;

  iptables -A chain firewall-rule
 

UFW:

List Rules;

  ufw status numbered

Delete Rules;

  ufw delete 4

Create Rules;

  ufw allow 2222

Disable;

  ufw reset

FIREWALLD:

Find Where Firewall Is Active

  firewall-cmd --get-active-zones

  firewall-cmd --get-services

Get Firewall Info

  firewall-cmd --zone=public --list-all

Open a Port

  firewall-cmd --permanent --zone=public --add-port=80/tcp

Remove Rule

  firewall-cmd --zone=public --remove-port=80/tcp

Confirm Removal

  firewall-cmd --zone=public --list-ports

Allow Service

  firewall-cmd --zone=public --add-service=ftp

Block In and Out Connections

  firewall-cmd --panic-on

  firewall-cmd --query-panic

Turn Block All Connections Off

  firewall-cmd --panic-off
 firewall-cmd --query-panic