sbd: init at 1.37

[D3vil0p3r]

Description of changes

The official website tigerteam.se (not more available) had also latest version 1.37, that should be the version used in Kali Linux. Not sure if a good idea could be to upload this latest version to the packetstormsecurity website, that was the main website where the devs of sbd uploaded the different versions of sbd (except the last one).

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[ghost]

what's wrong with just using netcat?

[ghost]

the unix and darwin builds are basically identical and windows isn't listed in supported platforms so just build with unix target

{ lib
, stdenv
, fetchurl
}:

let
  archiveUrl = url: "https://web.archive.org/web/20230802015002/${url}";
in
stdenv.mkDerivation (finalAttrs: {
  pname = "sbd";
  version = "1.37";

  src = fetchurl {
    url = archiveUrl "http://www.tigerteam.se/dl/sbd/sbd-${finalAttrs.version}.tar.gz";
    hash = "sha256-Qt5Q3PynV80DAXxuVqx6L4dTKgjnBDQjzSDZEf1kX10=";
  };

  makeFlags = [
    "CC=cc"
    "PREFIX=${placeholder "out"}"
  ];

  buildFlags = [
    "unix"
  ];

  meta = with lib; {
    description = "Netcat-clone, portable, offers strong encryption - features AES-128-CBC + HMAC-SHA1 encryption, program execution, choosing source port, continuous reconnection with delay and more";
    mainProgram = "sbd";
    homepage = archiveUrl "http://www.tigerteam.se/dl/sbd";
    license = licenses.gpl2Plus;
    maintainers = with maintainers; [ d3vil0p3r ];
    platforms = platforms.unix;
  };
})

[ghost]

Suggested change

	platforms = platforms.unix;
	platforms = platforms.unix;

this needs to get changed or buildFlags needs to get changed. have you tried to build for win32?
I tried to build pkgsCross.mingwW64.sbd and pkgsCross.mingw32.sbd and both fail to build.

[ghost]

the home page should be https://web.archive.org/web/20220626230420/http://www.tigerteam.se/dl/sbd/

[D3vil0p3r]

-mno-cygwin is deprecated and it should be removed. After that, for Windows, it is needed to find a way to include windows libraries like winsock.h.

[ghost]

still not sure how this is better than netcat -- i'm not going to merge this. also just saw the matrix discussion on the review requests channel.

[D3vil0p3r]

@a-n-n-a-l-e-e netcat has not encryption (and authentiication controls) so in an untrustworthy network the usage of vanilla netcat could be problematic. Unlike netcat, sbd offers some encryption on data flow. So, this is one use case. I understand the discussion on Matrix but I work in the InfoSec field so I understand the needs of a pentester, architect, blue teamer wherease people not working in this field cannot understand, mostly because InfoSec field is very huge. Feel free to tell your point, if you think it is a bad idea, I can close the PR.

[ghost]

you also have a PR for #288104 which seems to be a slightly modified version of sbd in this PR. not sure why both are necessary. [edit] or any, there seem to be many ways to create encrypted connections between machines these days -- heck, can even just run ssh as a non-root user.