I wonder if its possible to find the session keys for Tor's circuit for a hidden service such as facebookcorewwwi.onion (or public site)?

enter image description here

There are 4 keys used in connecting to a site:

  1. Key between tor client and entry guard
  2. Key between tor client and middle relay
  3. Key between tor client and exit node
  4. ssl session key (if the service is using ssl/tls)

I have checked nyx project, but could not find any information about encryption details of a circuit. The output from nyx is something similar to this (image from this link): https://www.slideshare.net/jmoc25/osint-python-extracting-information-from-tor-network-and-darkweb

Please help me in this matter.

  • The tor code does not expose the session stream keys for each circuit hop (there are keys for both the forward and backward direction at each hop). You would need to modify the tor source code to log these, or expose them via the control protocol.
    – Steve
    Mar 22, 2020 at 23:18
  • Thanks for answer. By means of control protocol, you say that accessing tor through 9051 by telnet? If so, do you know the command? I didn't find anything in tor spec.
    – Mir Saman
    Mar 23, 2020 at 6:21
  • Tor's control protocol is documented in the control-spec document, but if you want to interact with it I recommend using the Python stem library rather than telnet.
    – Steve
    Mar 23, 2020 at 6:47
  • 1
    The example you were looking for: stem.torproject.org/tutorials/examples/list_circuits.html
    – user30477
    Jun 21, 2020 at 0:37


You must log in to answer this question.

Browse other questions tagged .