Name: DonaldDick
Version: 1.55 update
Author: BadMan Forever & Yaworsky
Language: Delphi (client), Watcom C++ (server)
Default port: n/a
Packed: not packed
| | Client CL | Server generator |
|---|---|---|
| Icon | ||
| Name | client.exe | ddsetup.exe |
| Size | 17920 (23.11.1999) | 333312 (23.11.1999) |
| KAV detected | Backdoor.DonaldDick.155 | Backdoor.DonaldDick.154 |
Released with source.
Features:
DDSFIND utility: Now donald dick server can create up to two datagramm listeners for ipx and udp protocols. Listeners accept datagramms and reply to their senders unless the server is running in hidden mode. DDSFIND utility sends datagramms and waits for reply for a specified timeout (5 seconds by default). Command line parameters:[ ] where: protocol: 0 - ipx, 1 - udp address: ipx/spx address or ip address port: socket/port number; you MUST know this, use values that were specified in ddsetup.ini when donald dick installer was generated count: number of sequental addresses to scan; when this parameter greater than 1, datagramms will be sent to the range of addresses; note that if you specify udp protocol, last digit only will be incremented; if count is large enough, address will wrap around timeout: (optional) how long wait for a reply, in ms; default is 5000, minimal value is 1000 address parameter may be a broadcast address; for ipx broadcast address is FFFFFFFFFFFF for local segment; use net number to send broadcast in other segments, for example: 43F7:FFFFFFFFFFFF; for udp broadcast address depends on subnet mask: for class a network it will be XXX.255.255.255 (where XXX is the net number), for class b network - - XXX.XXX.255.255, for class c network - XXX.XXX.XXX.255 also note that ipx and udp protocols aren't reliable and datagramms may be lost; so if you have poor connection, try to scan several times examples (assume port numbers: ipx 0x9015, udp 23476): get list of servers in local network, use ipx protocol: ddsfind 0 FFFFFFFFFFFF 0x9015 0 scan ipx range from 7FF800, 30 addresses: ddsfind 0 7FF800 0x9015 30 scan ipx range from FFFFFFFFFFF0, 20 addresses, wait reply for 10 seconds: ddsfind 0 FFFFFFFFFFF0 0x9015 20 10000 note that address will wrap around and broadcast address will also be involved; so if the server is installed on a workstation that have MAC address, say 000000000002, the reply will be sent twice get list of servers in ip network 193.125.39.0: ddsfind 1 193.125.39.255 23476 0 scan ip range from 192.168.44.230, 50 addresses: ddsfind 1 192.168.44.230 23476 50 note that we scan class b network, but only last digit of address will be incremented, so it will wrap around and scan will continue with 192.168.44.0 DONALD DICK changes: version 1.55: recent changes from 1.54: - datagramm listeners and ddsfind utility - bugfix: erase installer