dd
Low-level block copy / disk imaging.
KaliParrotLinuxmedium
pkg: coreutils
dd copies data block-by-block — used to create bit-exact forensic images of disks and partitions.
Syntax
dd if={src} of={dest} bs={size} [status=progress]
Example
dd if=/dev/sdb of=disk.img bs=4M status=progress
Creates a raw, bit-for-bit image of /dev/sdb into disk.img.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
dd
Usage examples
dd if=/dev/sdb of=disk.img bs=4M status=progress
Image a disk to a file.
dd if=/dev/zero of=f bs=1M count=10
Create a 10 MB test file.
Advantages
- Exact forensic imaging
- Universally available
- Flexible block operations
Disadvantages
- One typo can wipe a disk ("disk destroyer")
- No built-in verification (hash separately)
- No compression/log by itself
Tags
#imaging#disk
Official docs: dd (coreutils) ↗
Related commands
Frequently asked questions
What is dd used for?
dd copies data block-by-block — used to create bit-exact forensic images of disks and partitions.
What is an example dd command?
A common example is: dd if=/dev/sdb of=disk.img bs=4M status=progress — Creates a raw, bit-for-bit image of /dev/sdb into disk.img.
Is dd part of Kali Linux?
Yes. dd ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install coreutils.
What category of security tool is dd?
dd is a Forensics tool with a medium-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.