文章总结： 本文介绍利用Windows搜索工具Everything进行后渗透阶段文件搜集的技术，包括通过命令行安装客户端服务、配置HTTP/ETP服务器实现远程文件下载，以及通过ini文件配置全盘索引和移动硬盘支持，适用于内网渗透中的数据窃取场景。
综合评分： 72
文章分类： 内网渗透,红队,安全工具,后渗透,实战经验

Everything – Post Exploitation

原创

honyss
honyss

NoCrackme

2026年2月10日 09:01
湖南

前言

Everything 是一个适用于 Windows 系统的文件搜索工具，其功能强大、性能出色、便携性极佳，非常适合用于在后渗透过程中，从目标主机上寻找并下载文件。在其官网下载便携版（Portable）即可。

svc 管理服务

安装服务命令：

PS C:\> Everything.exe -install-client-service -config .\Everything.ini -nodb -nocase -enable-run-as-admin

卸载服务命令：

PS C:\> Everything.exe -uninstall-client-service

ini 配置文件

HTTP Server 配置：

; Please make sure Everything is not running before modifying this file.[Everything]http_server_enabled=1http_server_bindings=0.0.0.0http_title_format=http_server_port=8888http_server_username=adminhttp_server_password=123456http_server_home=http_server_default_page=http_server_log_file_name=http_server_logging_enabled=0http_server_log_max_size=4194304http_server_log_delta_size=524288http_server_allow_file_download=1

ETP/FTP Server 配置：

etp_server_enabled=1etp_server_bindings=0.0.0.0etp_server_port=2121etp_server_username=adminetp_server_password=123456etp_server_welcome_message=etp_server_log_file_name=etp_server_logging_enabled=0etp_server_log_max_size=4194304etp_server_log_delta_size=524288etp_server_allow_file_download=1ftp_allow_port=1ftp_check_data_connection_ip=1

添加移动硬盘至 Everything 中：

注：Everything 默认支持 NTFS 格式磁盘文件，如需支持非 NTFS 格式的移动硬盘，需要通过文件夹来指定

folders="A:\\","B:\\","C:\\","D:\\","G:\\","H:\\","I:\\","J:\\","K:\\","L:\\","M:\\","N:\\","O:\\","P:\\","Q:\\","R:\\","S:\\","T:\\","U:\\","V:\\","W:\\","X:\\","Y:\\","Z:\\"folder_monitor_changes=1,1folder_buffer_size_list=65536,65536folder_rescan_if_full_list=0,0folder_update_types=0,2folder_update_days=0,0folder_update_ats=3,3folder_update_intervals=30,6folder_update_interval_types=0,1

run 运行效果

help 详细参数

Everything.exe [filename] [-options]filename &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Open&nbsp;the specified file list.Options:-? &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;this help.-admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Run "Everything"&nbsp;as&nbsp;Administrator.-admin-server-share-links &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Use \\Server\C$ links&nbsp;for&nbsp;ETP connections.-app-data &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Store data&nbsp;in&nbsp;application data.-bookmark&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Open&nbsp;a bookmark.-case&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable&nbsp;case&nbsp;matching.-choose-language&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Show&nbsp;the&nbsp;language&nbsp;selection page.-choose-volumes &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Do&nbsp;not&nbsp;automatically index volumes.-close&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Close&nbsp;the&nbsp;current&nbsp;search&nbsp;window.-config&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; The filename&nbsp;of&nbsp;the ini file.-connect&nbsp;<user:pass@host:port>&nbsp; &nbsp; &nbsp;&nbsp;Connect&nbsp;to&nbsp;an ETP server.-console &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;the debugging console.-copyto&nbsp;<filename1>&nbsp;<...>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;the multi-file renamer&nbsp;with&nbsp;the specified filenames.-create-file-list&nbsp;<filename>&nbsp;<path>&nbsp;Create&nbsp;a file list&nbsp;of&nbsp;a path.-create-file-list-exclude-files&nbsp;<list>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Exclude the semicolon delimited wildcard&nbsp;filter&nbsp;for&nbsp;files.-create-file-list-exclude-folders&nbsp;<list>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Exclude the semicolon delimited wildcard&nbsp;filter&nbsp;for&nbsp;folders.-create-file-list-include-only-files&nbsp;<list>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Include&nbsp;only&nbsp;the semicolon delimited wildcard&nbsp;filter&nbsp;for&nbsp;files.-create-usn-journal&nbsp;<volume>&nbsp;<max-size-bytes>&nbsp;<allocation-delta-bytes>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Create&nbsp;a USN Journal&nbsp;with&nbsp;the specified parameters.-db&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; The filename&nbsp;of&nbsp;the database.-debug &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;the debugging console.-debug-log &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Log debugging information&nbsp;to&nbsp;disk.-delete-usn-journal&nbsp;<volume>&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Delete&nbsp;a USN Journal.-details &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;results&nbsp;in&nbsp;detail view.-diacritics &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Enable diacritics matching.-disable-run-as-admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Disable run&nbsp;as&nbsp;administrator.-disable-update-notification &nbsp; &nbsp; &nbsp; &nbsp;Disable&nbsp;update&nbsp;notification&nbsp;on&nbsp;startup.-drive-links &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Use C: links&nbsp;for&nbsp;ETP connections.-edit&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Open&nbsp;a file list&nbsp;with&nbsp;the file list editor.-enable-run-as-admin &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable run&nbsp;as&nbsp;administrator.-enable-update-notification &nbsp; &nbsp; &nbsp; &nbsp; Enable&nbsp;update&nbsp;notification&nbsp;on&nbsp;startup.-exit &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Exit "Everything".-first-instance &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Only&nbsp;run if this&nbsp;is&nbsp;the&nbsp;first&nbsp;instance&nbsp;of&nbsp;"Everything".-filelist&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Open&nbsp;a file list.-filename&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Search&nbsp;for&nbsp;a file&nbsp;or&nbsp;folder&nbsp;by&nbsp;filename.-filter&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Select&nbsp;a&nbsp;search&nbsp;filter.-focus-bottom-result&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Focus the bottom result.-focus-last-run-result&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Focus the&nbsp;last&nbsp;run result.-focus-most-run-result&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Focus the most run result.-focus-results &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Focus the&nbsp;result&nbsp;list.-focus-top-result&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Focus the top result.-ftp-links &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Use ftp://host/C: links&nbsp;for&nbsp;ETP connections.-fullscreen &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Show&nbsp;the&nbsp;search&nbsp;window&nbsp;fullscreen.-h &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;this help.-help &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Show&nbsp;this help.-home &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Open&nbsp;the home search.-install&nbsp;<location>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Install "Everything"&nbsp;to&nbsp;a&nbsp;new&nbsp;location.-install-client-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Install the "Everything" client&nbsp;as&nbsp;a service.-install-config&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Install the specified ini file.-install-desktop-shortcut &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Install desktop shortcut.-install-efu-association &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Install EFU file association.-install-folder-context-menu &nbsp; &nbsp; &nbsp; &nbsp;Install folder context menus.-install-quick-launch-shortcut &nbsp; &nbsp; &nbsp;Install Quick Launch shortcut.-install-run-on-system-startup &nbsp; &nbsp; &nbsp;Install "Everything"&nbsp;from&nbsp;the&nbsp;system&nbsp;startup.-install-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Install&nbsp;and&nbsp;start&nbsp;the "Everything" service.-install-service-pipe-name&nbsp;<name>&nbsp; &nbsp;Use the specified name&nbsp;for&nbsp;the "Everything" service pipe name.-install-service-security-descriptor&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Specify the pipe security descriptor.-install-start-menu-shortcuts &nbsp; &nbsp; &nbsp; Install "Everything" shortcuts&nbsp;from&nbsp;the&nbsp;Start&nbsp;menu.-install-url-protocol &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Install URL Protocol.-instance&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; The name&nbsp;of&nbsp;the "Everything" instance.-l &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Load the&nbsp;local&nbsp;database.-language&nbsp;<langID>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Set&nbsp;the&nbsp;language&nbsp;to&nbsp;the specified&nbsp;language&nbsp;ID.-load-delay&nbsp;<milliseconds>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; The delay&nbsp;in&nbsp;milliseconds before loading the database.-local&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Load the&nbsp;local&nbsp;database.-matchpath &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable&nbsp;full&nbsp;path matching.-maximized &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Maximize the&nbsp;search&nbsp;window.-minimized &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Minimize the&nbsp;search&nbsp;window.-moveto&nbsp;<filename1>&nbsp;<...>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;the multi-file renamer&nbsp;with&nbsp;the specified filenames.-name-part&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Search&nbsp;for&nbsp;the name part&nbsp;of&nbsp;a filename.-newwindow &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Create&nbsp;a&nbsp;new&nbsp;search&nbsp;window.-noapp-data &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Store data&nbsp;in&nbsp;executable location.-nocase &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Disable&nbsp;case&nbsp;matching.-nodb &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Do&nbsp;not&nbsp;save&nbsp;to&nbsp;or&nbsp;load&nbsp;from&nbsp;the "Everything" database file.-nodiacritics &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Disable diacritics matching.-nofullscreen &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Show&nbsp;the&nbsp;search&nbsp;window&nbsp;in&nbsp;a window.-nomatchpath &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Disable&nbsp;full&nbsp;path matching.-nomaximized &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Unmaximize the&nbsp;search&nbsp;window.-nominimized &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Unminimize the&nbsp;search&nbsp;window.-nonewwindow &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;an existing&nbsp;search&nbsp;window.-noontop &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Disable always&nbsp;on&nbsp;top.-noregex &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Disable Regex.-noverbose &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Display&nbsp;only&nbsp;basic debug messages.-nowholeword &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Disable&nbsp;match&nbsp;whole word.-noww &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Disable&nbsp;match&nbsp;whole word.-ontop &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable always&nbsp;on&nbsp;top.-p&nbsp;<path>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Search&nbsp;for&nbsp;a path.-parent&nbsp;<path>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Search&nbsp;for&nbsp;files&nbsp;and&nbsp;folders&nbsp;in&nbsp;the specified folder.-parentpath&nbsp;<path>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Search&nbsp;for&nbsp;the parent&nbsp;of&nbsp;a path.-path&nbsp;<path>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Search&nbsp;for&nbsp;a path.-quit &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Exit "Everything".-read-only&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Loads the database&nbsp;in&nbsp;read-only&nbsp;mode.-regex &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable Regex.-reindex &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Force database rebuild.-rename&nbsp;<filename1>&nbsp;<...>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Show&nbsp;the multi-file renamer&nbsp;with&nbsp;the specified filenames.-rescan-all&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Rescan&nbsp;all&nbsp;folder indexes.-s&nbsp;<text>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Set&nbsp;the search.-search&nbsp;<text>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Set&nbsp;the search.-search-file-list&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Search&nbsp;the specified text file&nbsp;for&nbsp;a list&nbsp;of&nbsp;file names.-select&nbsp;<filename>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Focus&nbsp;and&nbsp;select&nbsp;the specified result.-server-share-links &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Use \\Server\C: links&nbsp;for&nbsp;ETP connections.-service-pipe-name&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Connect&nbsp;to&nbsp;the service pipe&nbsp;with&nbsp;the specified name.-sort&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Set&nbsp;the sort&nbsp;to&nbsp;the specified name.-sort-ascending &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Sort ascending.-sort-descending &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Sort descending.-start-client-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Start&nbsp;the "Everything" client service.-start-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Start&nbsp;the "Everything" service.-startup &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Run "Everything"&nbsp;in&nbsp;the background.-stop-client-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Stop the "Everything" client service.-stop-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Stop the "Everything" service.-svc &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Run "Everything"&nbsp;as&nbsp;a service.-svc-pipe-name&nbsp;<name>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Host the pipe server&nbsp;with&nbsp;the specified name.-svc-security-descriptor&nbsp;<sd>&nbsp; &nbsp; &nbsp; &nbsp;Host the pipe server&nbsp;with&nbsp;the security descriptor.-thumbnail-size&nbsp;<size>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Specify the size&nbsp;of&nbsp;thumbnails&nbsp;in&nbsp;pixels.-thumbnails &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Show&nbsp;results&nbsp;in&nbsp;thumbnail view.-toggle-window&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Hides the&nbsp;current&nbsp;foreground&nbsp;search&nbsp;window&nbsp;or&nbsp;shows the&nbsp;search&nbsp;window.-uninstall [path] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Uninstall "Everything"&nbsp;from&nbsp;the specified path.-uninstall-client-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Uninstall the "Everything" client service.-uninstall-desktop-shortcut &nbsp; &nbsp; &nbsp; &nbsp; Uninstall desktop shortcut.-uninstall-efu-association &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Uninstall EFU file association.-uninstall-folder-context-menu &nbsp; &nbsp; &nbsp;Uninstall folder context menus.-uninstall-quick-launch-shortcut &nbsp; &nbsp;Uninstall Quick Launch shortcut.-uninstall-run-on-system-startup &nbsp; &nbsp;Remove "Everything"&nbsp;from&nbsp;the&nbsp;system&nbsp;startup.-uninstall-service &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Uninstall the "Everything" service.-uninstall-start-menu-shortcuts &nbsp; &nbsp; Uninstall "Everything" shortcuts&nbsp;from&nbsp;the&nbsp;Start&nbsp;menu.-uninstall-url-protocol &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Uninstall URL Protocol.-uninstall-user&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Uninstall&nbsp;user&nbsp;files.-update&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Save the database&nbsp;to&nbsp;disk.-url&nbsp;<[es:]search>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Set&nbsp;the&nbsp;search&nbsp;from&nbsp;an ES: URL.-verbose &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Display&nbsp;all&nbsp;debug messages.-wholeword &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Enable&nbsp;match&nbsp;whole word.-ww &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Enable&nbsp;match&nbsp;whole word.

免责声明：

本文所载程序、技术方法仅面向合法合规的安全研究与教学场景，旨在提升网络安全防护能力，具有明确的技术研究属性。

任何单位或个人未经授权，将本文内容用于攻击、破坏等非法用途的，由此引发的全部法律责任、民事赔偿及连带责任，均由行为人独立承担，本站不承担任何连带责任。

本站内容均为技术交流与知识分享目的发布，若存在版权侵权或其他异议，请通过邮件联系处理，具体联系方式可点击页面上方的联系我。

本文转载自：NoCrackme honyss
honyss《Everything – Post Exploitation》