-1

The question is strictly from an attacker's perspective. Imagine I am an attacker running KALI Linux on a VM / live disk. I know that VPN and TOR are probable ways of hiding my identity from my victims.

Here are my list of concerns.

  • I am a cheap attacker with no money to spend on true privacy VPNs. What would I opt in that case? Would I stick with TOR or are there any other better alternatives?
  • What are the identity leak risks associated with TOR?
  • How can I configure the KALI machine in such a way that the entire traffic from my machine is routed via TOR alone?
  • How do I make sure that no TCP, UDP or ICMP packet leaves my machine to anywhere else other than through the TOR tunnel?
  • Is there a comprehensive guide for setting up TOR securely on KALI?
  • Are there any anonymity+offensive security linux distros available?

closed as too broad by Gilles, Dog eat cat world, techraf, S.L. Barth, Rory Alsop Oct 29 '16 at 8:29

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Start the Tor service and set the network proxy on 127.0.0.1:9050 – O'Niel Oct 28 '16 at 19:22
  • @O'Niel How about ICMP packets in that case? – hax Oct 28 '16 at 19:27
  • Using Tor as a proxy is a bad idea if total anonymity is your endgame. Firefox can be configured not to, but Chrome will leak DNS requests for example. Not all services will obey proxy settings either and you'll likely have divulged information of some sort before you discover this. In general rather than trying to shove all traffic through Tor it's much safer to hijack someone else's assets and perform your attack from there. – Ivan Oct 28 '16 at 19:41
  • @Johnny That's the answer I was looking for. That definitely is a point of leak. What configuration in the OS level can proxy all the requests irrespective of protocol. – hax Oct 28 '16 at 19:57
  • 1
    That's too many questions in one. Please ask one question at a time. Furthermore some of these are off-topic — this site is about security, not about how to install software your system. – Gilles Oct 28 '16 at 21:28
4

Whonix is a distribution which only routes it's network connections through TOR. Check it out.

  • TailsOS does this as well. – Ivan Oct 28 '16 at 19:34
  • We cannot install tools on tail though. – hax Oct 28 '16 at 19:56
  • 1
    While we normally prefer more fleshed out answers, and link-only answers have limited value, this answer does basically meet the needs as an answer in this case. – schroeder Oct 28 '16 at 20:34
  • @schroeder and more secure than setting the device's proxy to 127.0.0.1:9050. – Samuel Shifterovich Oct 28 '16 at 21:58
  • @hax Kind of late to the conversation but what is stopping you from installing stuff on tails? Sure, none of the stuff will survive a reboot but you can install stuff. – mchid Sep 6 '17 at 7:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.