I wonder if its possible to find the session keys for Tor's circuit for a hidden service such as facebookcorewwwi.onion (or public site)?

enter image description here

There are 4 keys used in connecting to a site:

  1. Key between tor client and entry guard
  2. Key between tor client and middle relay
  3. Key between tor client and exit node
  4. ssl session key (if the service is using ssl/tls)

I have checked nyx project, but could not find any information about encryption details of a circuit. The output from nyx is something similar to this (image from this link): https://www.slideshare.net/jmoc25/osint-python-extracting-information-from-tor-network-and-darkweb

Please help me in this matter.

  • The tor code does not expose the session stream keys for each circuit hop (there are keys for both the forward and backward direction at each hop). You would need to modify the tor source code to log these, or expose them via the control protocol.
    – Steve
    Mar 22 '20 at 23:18
  • Thanks for answer. By means of control protocol, you say that accessing tor through 9051 by telnet? If so, do you know the command? I didn't find anything in tor spec.
    – Mir Saman
    Mar 23 '20 at 6:21
  • Tor's control protocol is documented in the control-spec document, but if you want to interact with it I recommend using the Python stem library rather than telnet.
    – Steve
    Mar 23 '20 at 6:47
  • 1
    The example you were looking for: stem.torproject.org/tutorials/examples/list_circuits.html
    – user30477
    Jun 21 '20 at 0:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.