Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Problem install OnionSwitch in kali? [migrated]

I am having an issue installing OnionSwitch for Tor on Kali. I downloaded the zip from Git and and tried following the instructions listed at the Url. https://github.com/Ned84/OnionSwitch When I ...
0
votes
1answer
76 views

Is it easy to use pentesting tools in .onion websites?

Is it possible to use tools such as metasploit, Nessus, Burp Suite, etc. for checking vulnerabilities in .onion websites. If yes how?
0
votes
0answers
74 views

What’s the point in using proxychains for an nmap scan when you could use Tor?

I always hear on YouTube and other places on the internet that Tor is the best option to stay anonymous. Tor is used by many activists, journalists etc. hiding from oppressive governments and so on. ...
0
votes
1answer
76 views

Person tried to login in my website with non-existent username, but not a VPN nor Tor

I am managing a WordPress website. I have installed the plugin "Limit Login Attempts Reloaded". This plugin sent me an email saying that A.B.C.D has tried to login with the non-existent ...
0
votes
0answers
40 views

Surfed Darkweb carelessly [duplicate]

A while ago, I installed Tor app on my android (fully updated and Android 10) and with a free Vpn tried to open some sites listed on several blogs (like "best dark sites in 2020" or "...
0
votes
2answers
93 views

Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)

In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
0
votes
2answers
196 views

Staying anonymous vs a Five Eyes adversary?

If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it? The person ...
1
vote
1answer
109 views

Protect IP Address and location from Twitter

Is there a way to protect IP Address and location from Twitter after having logged in ? All I want Twitter to know is my email and password and nothing else. No IP Address, no location. Is that ...
0
votes
1answer
127 views

Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)

Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
0
votes
0answers
32 views

tor janus vm or vpn for tcp and udp traffic

I have a hyper-v server I want to use for malware analysis. I have setup a pfsense firewall routing internal vm traffic, out through pfsense wan port. I have set firewall rules so nothing on pfsense ...
2
votes
1answer
174 views

Hiding Tor traffic to prevent deanonymization

I am trying to figure out what is the best way to hide Tor traffic in order to improve anonymity. While Tor is pretty good at hiding users’ IP addresses, its traffic stands out. This can be ...
1
vote
1answer
94 views

Can uncompressing a ZIP/tar.gz/rar/etc file execute some custom code?

So I recently downloaded Tor Browser on my Linux machine and what immediately caught my eye is the fact that after uncompressing the file (I think it was .tar.gz, but the question applies to every ...
0
votes
1answer
165 views

Hiding ip address when using coinomi wallet

How do I hide my ip address if I use a wallet as coinomi? Do I have to use Orbot? If yes, what exactly should I do? (I'm using it from an android) I just want to have privacy when I log into the ...
0
votes
0answers
173 views

MiTM attack on a Tor V3 Onion Service?

As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
3answers
247 views

How Does Tor Prevent the Exit Node from Seeing the IP of a Tor Website

Usually the anonimity aspect of Tor is explained from the client point of view. The entry node can know who you are but cannot know which website you're accessing, and the exit node cannot know who ...
1
vote
1answer
232 views

Preserving anonymity with ring 0 malware infected PC

I am attempting to determine whether it would be possible to maintain your anonymity while using an internet-connected PC infected with ring 0 malware. The threat model assumes the adversary is ...
2
votes
1answer
436 views

Why does Tor browser use POST method for DuckDuckGo?

I noticed that the default behavior of Tor browser is to use POST method for all DuckDuckGo searches even when that's not the default DuckDuckGo setting. At first I thought it'd be to protect the ...
1
vote
1answer
82 views

Is there a reasonable chance of a well-funded agent obtaining raw traffic over Tor circuits

If an agent has a few middle Tor relays (Am) and a few exit Tor relays (Ae), could they obtain the original traffic of some of the circuits with a reasonable probability? Let's assume, without too ...
0
votes
0answers
71 views

Visual Studio Code on Linux - Privacy risk? [duplicate]

I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
0
votes
0answers
49 views

Force Proxychains random_chaining to use a specific proxy

I want to proxy some of my traffic through the tor network, using proxychains, but I'd also like to have random chaining enabled. I'm worried that some of the traffic would not go through tor when it ...
3
votes
2answers
360 views

Analyzing Tor traffic through Deep Packet Inspection?

I've just read about the detecting and blocking of Tor traffic by DPI but now I'm curious about analyzing the data you send over Tor and matching it with your true identity by deep-inspecting the data ...
-1
votes
1answer
467 views

how to safely open files downloaded with tor? [duplicate]

If I download a file (PDF,doc,image,video etc) with a tails/tor setup, how can I ensure the file doesn't "call home" or isnt imbedded with malware (other than looking at the hash)? Will a ...
0
votes
0answers
72 views

What can a government agency see if they control Tor nodes? [duplicate]

If I use Tails/tor on public WiFi, and a government agency is controlling /snooping nodes or uses malware to conduct a waterhole attack, what information can they gather about me?
2
votes
1answer
262 views

How anonymous would this be? [closed]

I use a laptop running tails/tor to go to a public wifi spot like a coffee shop and set up a new email account on protonmail. Then I take that laptop to a park in the middle of the night where there's ...
1
vote
0answers
16 views

Tor and MITM SSL [duplicate]

In my company they have MITM/SSL in following way. There is a proxy to whom all PCs connect. Now the company installed some trusted certificate authority (e.g. ISSUER-COMPANY-NAME) on our computers. ...
0
votes
2answers
100 views

Is it possible to create a hardware 'Plug and Play' TOR proxy?

Is there a way to use a device like a raspberrypi to create a kind of 'Plug and Play' TOR proxy? Ideally, a device would exist with an ethernet port as input and ethernet cable or USB as output which ...
0
votes
1answer
147 views

What can people do about Tor's weaknesses?

I read Tor's Wikipedia page and found out it has 12 weaknesses. What can people or The Tor Project do about those weaknesses? If they don't anything about it, wouldn't it compromise Tor users' ...
1
vote
1answer
271 views

How to configure VPN + Tor + linux as a proxy server?

Goal To hide the IP address using Tor, which goes through a proxy server to make HTTP/FTP requests look like they came from a regular user, not one who uses Tor. Example A user requests the website. ...
0
votes
0answers
100 views

Reverse shell from backdoor - exposing attacker? [duplicate]

If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address? I'd guess he can't use Tor or a VPN, because packet ...
8
votes
2answers
508 views

How can malware discover the real IP of a TAILS user?

The FBI recently used a 0day exploit to hack a TAILS user and expose their real IP. I am interested in how they could have managed to obtain the user's real public IP after compromising the machine. ...
2
votes
1answer
140 views

How does Tor preserve anonymity if it uses normal Internet Routing?

I'm studying Tor and Onion Routing and I don't understand how it preserves anonymity if the Internet routing is still done using public ip addresses. Let's suppose we have the following Tor circuit: ...
2
votes
1answer
145 views

Seems my CNAMEs got “curled”. Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
1
vote
1answer
95 views

Which approach is technically more effective to hinder user tracking - fingerprint generalization or randomization?

Tor's approach to countering fingerprinting is to make as many users "appear the same" as possible. Let us call this "generalization". While Brave tries to randomize all fingerprints of each and every ...
0
votes
0answers
62 views

TAILS anonymous filesharing

I performed some research on filesharing and anonimity, but it turns out anything I read is not about what I need. Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
-1
votes
1answer
264 views

How many proxy_len is good in proxychains?

How many chains are the best? chain_len = ? I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains? the default setting is chain_len = 2.
0
votes
0answers
374 views

Tor + proxychainsfails fails when using theHarvester

I'm testing theHarvester on Kali Linux without VM. As Google blocks me after 3 times I used theHarvester I'm piping everything into proxychains. First I check my IP address with curl ifconfig.me/ip ...
0
votes
0answers
185 views

Is it possible to fuzz/dirbuster a .onion website?

It's possible to fuzz/dirbuster a classic web site to search hidden or sensitive ressources/data. This command can do it : wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ My ...
8
votes
2answers
590 views

Can DeepCorr's correlation technique de-anonymize all Tor users?

https://people.cs.umass.edu/~amir/papers/CCS18-DeepCorr.pdf https://www.youtube.com/watch?v=_OKLtKgEn4k I have some questions about this "Deepcorr". Does "DeepCorr" really work that good? They say ...
0
votes
1answer
229 views

Can global adversaries 'de-anonymize' any Tor user in a day?

Tor traffic correlation attacks by global adversaries I know what traffic correlation attack is but I find it hard to understand this article or how it got to its conclusions about 'de-anonymize' '...
0
votes
1answer
110 views

Remote working. Is my employer able to monitor my activity

Due to situation, my employer made a work-from-home policy. And remote administration tool is not installed, since I did clean installation of the system. Is my employer able to see my activity? ...
12
votes
2answers
1k views

How does Tor maintain anonymity when a source and destination are required at the end? [duplicate]

I had a question about Tor and the anonymity status of a fully decrypted packet that leaves a Tor exit node. My high-level understanding is that prior to a packet traversing the Tor network, a Tor ...
3
votes
2answers
237 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...
1
vote
0answers
55 views

Is it possible to get redirected to a malware download URI while using Tor as a proxy?

Now this is an interesting one. I just received a forwarded email notification from my data center provider that one of my servers accessed a sink hole that is associated with the nymaim malware. The ...
3
votes
2answers
254 views

How to defend against network traffic pattern correlation attacks?

If i am chaining multiple VPN's and possibly running through Tor as well, network correlation attacks can be performed against me to try to locate my position. If my network spikes a download for 40MB/...
4
votes
3answers
671 views

Does Tor still hide all tracks?

I've seen some threads on Reddit that say true hackers, when attacking, go through a public WiFi network, use a VM, proxy through a zombie computer, use a VPN, then proxychain through Tor, use another ...
0
votes
2answers
440 views

Using Tor in public WIFI is it secured? [duplicate]

Is using the Tor network to visit the web pages in public wifi secure or not since Tor will help to make us anonymous (hide the metadata such as URLs) and HTTPS helps us to protect the content. Will ...
14
votes
2answers
4k views

Does Tor help us to prevent ISP tracking?

If Tor is able to hide the IP address of the machine and make us anonymous, then does it prevent the ISP from tracking us?
-1
votes
1answer
121 views

Run Phone Apps in VM Anonymously and Security Risks of Virtualbox

Would it be possible to run phone apps that connect to the internet (eg. youtube, instagram, etc.) on an Android VM (or any sort of phone VM, doesn't need to be android) in VirtualBox within a host OS ...
3
votes
1answer
2k views

How does proxychains avoid DNS leaks?

Also directly related, how are the DNS servers queried when using proxychains? Assume I'm using Tor for proxychains. If I uncomment the DNS part of proxychains.conf, my requests supposedly get sent ...
1
vote
1answer
153 views

Encrypt data within the TOR network

They say that the last TOR node presents all the information in clear. If I want to send some sensitive information by TOR, could you encrypt it, and in this way be encrypted by both the TOR nodes, ...

1
2 3 4 5
10