Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

Filter by
Sorted by
Tagged with
1
vote
0answers
73 views

Seems my CNAMEs got “curled”. Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
0
votes
1answer
55 views

Which approach is technically more effective to hinder user tracking - fingerprint generalization or randomization?

Tor's approach to countering fingerprinting is to make as many users "appear the same" as possible. Let us call this "generalization". While Brave tries to randomize all fingerprints of each and every ...
0
votes
0answers
33 views

TAILS anonymous filesharing

I performed some research on filesharing and anonimity, but it turns out anything I read is not about what I need. Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
-1
votes
0answers
37 views

Ngrok/Teleport and TOR [closed]

I would like to know if there is any free solution similiar to ngrok/teleport/serveo that works with tor?
1
vote
1answer
85 views

Alternatives to TAILS for anonimity on TOR unfriendly websites

I'm a happy TAILS user since a while. I've immeditaly fallen in love with the simplicity of the installation and user experience in general: no code, minimal competences required to get everything up ...
-1
votes
1answer
47 views

How many proxy_len is good in proxychains?

How many chains are the best? chain_len = ? I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains? the default setting is chain_len = 2.
0
votes
0answers
42 views

Tor + proxychainsfails fails when using theHarvester

I'm testing theHarvester on Kali Linux without VM. As Google blocks me after 3 times I used theHarvester I'm piping everything into proxychains. First I check my IP address with curl ifconfig.me/ip ...
0
votes
0answers
63 views

Is it possible to fuzz/dirbuster a .onion website?

It's possible to fuzz/dirbuster a classic web site to search hidden or sensitive ressources/data. This command can do it : wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ My ...
8
votes
2answers
437 views

Can DeepCorr's correlation technique de-anonymize all Tor users?

https://people.cs.umass.edu/~amir/papers/CCS18-DeepCorr.pdf https://www.youtube.com/watch?v=_OKLtKgEn4k I have some questions about this "Deepcorr". Does "DeepCorr" really work that good? They say ...
0
votes
1answer
119 views

Can global adversaries 'de-anonymize' any TOR user in a day?

Tor traffic correlation attacks by global adversaries I know what traffic correlation attack is but I find it hard to understand this article or how it got to its conclusions about 'de-anonymize' '...
0
votes
1answer
82 views

Remote working. Is my employer able to monitor my activity

Due to situation, my employer made a work-from-home policy. And remote administration tool is not installed, since I did clean installation of the system. Is my employer able to see my activity? ...
12
votes
2answers
849 views

How does Tor maintain anonymity when a source and destination are required at the end? [duplicate]

I had a question about Tor and the anonymity status of a fully decrypted packet that leaves a Tor exit node. My high-level understanding is that prior to a packet traversing the Tor network, a Tor ...
3
votes
2answers
126 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...
1
vote
0answers
50 views

Is it possible to get redirected to a malware download URI while using Tor as a proxy?

Now this is an interesting one. I just received a forwarded email notification from my data center provider that one of my servers accessed a sink hole that is associated with the nymaim malware. The ...
3
votes
2answers
139 views

How to defend against network traffic pattern correlation attacks?

If i am chaining multiple VPN's and possibly running through Tor as well, network correlation attacks can be performed against me to try to locate my position. If my network spikes a download for 40MB/...
3
votes
3answers
447 views

Does Tor still hide all tracks?

I've seen some threads on Reddit that say true hackers, when attacking, go through a public WiFi network, use a VM, proxy through a zombie computer, use a VPN, then proxychain through Tor, use another ...
0
votes
2answers
153 views

Using Tor in public WIFI is it secured? [duplicate]

Using the Tor network to visit the web pages in public wifi is secured or not since The Tor will help us to make us anonymous( To hide the metadata such as visiting URLs) and The HTTPS helps us to ...
13
votes
1answer
4k views

Does Tor help us to prevent ISP tracking?

If Tor is able to hide the IP address of the machine and make us anonymous, then does it prevent the ISP from tracking us?
-1
votes
1answer
56 views

Run Phone Apps in VM Anonymously and Security Risks of Virtualbox

Would it be possible to run phone apps that connect to the internet (eg. youtube, instagram, etc.) on an Android VM (or any sort of phone VM, doesn't need to be android) in VirtualBox within a host OS ...
0
votes
0answers
128 views

How safe is using private tor obfs4 bridges?

If you live in an oppressed country like China etc. then you must use tor bridges but if all the ISPs blocked all tor bridges (public ones) then you need to use private bridges which are not ...
1
vote
1answer
275 views

How does proxychains avoid DNS leaks?

Also directly related, how are the DNS servers queried when using proxychains? Assume I'm using Tor for proxychains. If I uncomment the DNS part of proxychains.conf, my requests supposedly get sent ...
1
vote
1answer
112 views

Encrypt data within the TOR network

They say that the last TOR node presents all the information in clear. If I want to send some sensitive information by TOR, could you encrypt it, and in this way be encrypted by both the TOR nodes, ...
0
votes
1answer
244 views

Whonix with Remmina to Connect on RDP - Is it safe?

My question is based on 2 things. I do not want my ISP logging any of my data, and do not trust my VPN either. Is it a safe measure to use Whonix in a VirtualBox, connecting over VPN. Then using ...
0
votes
0answers
82 views

How would you hide your tracks/location without Tor or a VPN yourself?

This is kinda similar to this question, How can you hide / fake your ip address without proxy / vpn?, but this was about particular tools and their effectiveness. What I'm wondering is how someone ...
3
votes
1answer
366 views

Dangers of using Tor snowflake?

The Tor project has recently released a browser extension called snowflake which allows users in countries with heavy censorship to access websites which would otherwise be blocked using the ...
1
vote
0answers
78 views

I'm looking for an email provider like this [closed]

I am looking for email providers with the following conditions for privacy. email providers that: Are free. Do not require JavaScript or other credentials for registration. Provide an onion service. ...
2
votes
1answer
137 views

How does malware use the Tor network [closed]

How does malware use the Tor network to keep hidden services safe from takedowns
5
votes
2answers
354 views

How does Tor protect against MITM attacks between the client and relay nodes?

According to robertheaton.com: When a Tor client constructs a circuit, it negotiates TLS sessions with each of the nodes it has chosen for its circuit using the nodes’ TLS certificates and public ...
2
votes
0answers
46 views

Attacks on decentralised networks by running a fleet of nodes with modified software

At least some decentralised networks purported to provide anonymity are vulnerable to this attack: the original software is modified to allow tracking/logging/whatever, and a large amount of nodes ...
1
vote
0answers
584 views

RDP/VNC/Xorg over Tails/Tor - From Tails to Windows [closed]

Remoting from a Tails machine to a Windows one. I have been working for a couple of days on making it work with no avail. Using Tails with small persistent modules installed (iceweasel, remmina, ...
1
vote
3answers
1k views

How can one using Tor and a Virtual Machine be traced?

Theoretically, wouldn't it be impossible to be traced using Tor + Virtual Machine? Assuming you connect to a website trying to track your personal location. Your IP address is completely hidden by ...
2
votes
2answers
198 views

Can a tor exit node know the ip of .onion sites?

I am just wondering about this since I heard that tor exit nodes know the ip of the website the user is visiting
-1
votes
1answer
237 views

Tor relay on port 9001 TCP

I executed netstat -t on my linux terminal and noticied a tor relay running on port 9001. I've search about the IP address of relay on shodan and got a result that address is from Russia, after that i ...
0
votes
0answers
97 views

Can I2P traffic be identified?

If one is using Tor, the network administrator or ISP will be able to know that one is using Tor (reference). What about for I2P? If one uses I2P, can the network administrator find out that one is ...
3
votes
4answers
1k views

How well can Tor + VPN secure my anonymity on the internet?

I want to be as anonymous as possible online without anyone being able to connect me to my online activity. Assume that the people trying to track me have lots of resources and can even use the legal ...
0
votes
2answers
190 views

Concept for (almost) untraceable networking setup

I have been working on an my digital footprint lately, trying to reduce it as much as possible, taking steps like fully encrypting my device with Veracrypt, installing 3 AVs, or spending hours trying ...
1
vote
1answer
106 views

What are the security implications of connecting to Tor through an SSH SOCKS proxy?

Suppose I have a user account on a remote server run by a friend. I create a SOCKS tunnel on my computer that forwards connections from a local port to the remote server: ssh -N -D 12345 john@10.1.1....
1
vote
0answers
40 views

Is there a way to automatically change Tor Identities on Whonix?

I wanted to automatically change to a new Tor identity, say after an x amount of time where x can be any amount from 1 minute to 120 minutes. Is any such utility available for Whonix?
-1
votes
1answer
524 views

Detect Proxy and Tor exit nodes from an IP in python

I have a database (hadoop) of the users who access my website (their IPs) and i want to check if those users either use proxy networks or the TOR network and block them. I also want to differentiate ...
1
vote
2answers
199 views

Would a VPN prevent hackers from gaining access to my network if already breached?

Hypothetically, if someone had illegal access to your network, wireless, or the like, and if you set up a VPN, would that stop the hacker from being able to see everything that you do or would him ...
0
votes
4answers
239 views

Why it bothers if someone can de-anonymize anonymous network (like Tor)?

So we all know that NSA has the ability to track down Tor, I2P and all those anonymous networks. I know it's a piece of old news, but the question always shows up in my mind. Which is why bother it? I ...
-1
votes
1answer
156 views

Does Tor network encrypt the message before it reaches the first Router in Tor network?

I'd like to know this aspect in the inner working of Tor network. Right now I'm unable to find documentation that solves this, although by logic I guess the answer is 'no' I'd like to know for sure. ...
0
votes
2answers
177 views

Using a decoy traffic while using the internet

Since the ISP knows what sites I visit and they can assume or predict that I'm using Tor if they are monitoring my traffic, how can I distract them by making them see that I visit some particular site ...
1
vote
3answers
155 views

Do I have to do any setup if I want to run a VPN with the Tor browser bundle?

I know there will be some votes against this but I want to run a VPN alongside the Tor browser. Can I just open the VPN program, connect to the VPN provider, then open the Tor browser and use it as ...
1
vote
1answer
771 views

Is it safe to use Orbot with the normal Firefox browser on Android

I noticed that when using Orbots "VPN Mode" that my normal Firefox browser works fine and when I visit check.torproject.org it says I'm connected even though I'm not using the Tor Browser specifically....
0
votes
1answer
123 views

How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host

(Forgive me, I don't know whether to post this here for in the "Tor" community) I'm brand new to Tor, I understand the basics of how it works and the Do's & Don'ts. I have a Windows 10 computer (...
1
vote
1answer
164 views

website hacked by someone proxying over a tor router

I'm curious to get an opinion on following: If someone decides to exploit some sort of vulnerability in a web application of mine or performs something of malicious intent, would this individual be ...
2
votes
3answers
376 views

Can using torrent help me obfuscate Tor-over-VPN traffic?

There is tremendous misinformation about Tor in my country's mainstream media so, even though i use Tor for everyday surfing, I'd like to hide it from my ISP. Currently, I use a VPN whenever I am ...
3
votes
2answers
234 views

Are some privacy add-ons superfluous when using Tor browser?

If running the Tor browser, should you still have the same privacy add-ons as you would if you were running a "regular" browser? Or will some of them be superfluous because of the built-in ...
1
vote
1answer
71 views

How do I switch appearances with Tor when onion routing is disabled?

If I run the Tor Browser with onion routing disabled at home, obviously my real IP address is sent to the Web servers I'm connecting to, and Web servers and various third parties can make a decent ...

1
2 3 4 5
9