Files
Ares-mythic/documentation-payload/ares/commands/netstat.md
Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation
This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.
2026-04-14 14:02:44 +07:00

39 lines
715 B
Markdown

+++
title = "netstat"
chapter = false
weight = 103
hidden = false
+++
## Summary
Task an agent to retrieve network connections.
### Arguments
The `netstat`has multiple boolean flags to filter what data gets returned.
- `-Tcp`
- `-Udp`
- `-Listen`
- `-Established`
#### Tcp (optional)
Only return TCP results.
#### Udp (optional)
Only return UDP results.
#### Listen (optional)
Only return results that have a TCP state of `Listen`.
#### Established (optional)
Only return results that have a TCP state of `Established`.
## Usage
```
netstat
```
## Detailed Summary
The `netstat` command uses the Win32 API calling `GetExtendedTcpTable` and `GetExtendedUdpTable` from `iphlpapi.dll` to retrieve netstat.