Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
1
vote
2answers
39 views

Sending data to hidden service without browser

So I have currently setup a hidden service to give me an onion address and the port it runs off is port 80 or 443. For some cybersecurity research I'm doing, I was initially going to setup an exit ...
0
votes
2answers
42 views

Hide/disable clearnet website and make onyl available through onion link

it seems like an easy question but I cannot find good information. I have built a PHP website that is of course available in the clearnet through the IP and I have a hidden service running (so it is ...
0
votes
0answers
42 views

Not able to ssh over tor

I did setup and V3 hidden service for ssh but I'm not able to connect to the server through tor. When I run torify ssh USER@MYHIDDENSERVICEADDRESS.onionI get the following error: 1639811611 ERROR ...
1
vote
1answer
36 views

would this break onion security? serving clearnet resources from an onion site to force visitors to go through exit nodes

i read in another post "Onion services do not use exits and are end-to-end encrypted. They don't need HTTPS for its encryption and its impossible for connections to be man-in-the-middled." I ...
2
votes
1answer
43 views

How does Tor connect to a server while hiding it's ip?

This may be a naive question. When I type in a .onion address I assume that the Tor network is designed to not know the ip of the server, or else law enforcement could easily subpoena Tor saying "...
0
votes
0answers
19 views

Socks Proxy or Tor Browser for self/friendhosted services?

I'm wondering.. Would you use Tor Browser for self-hosted or friendhosted onion services? Or would you use your own Firefox+socks proxy specifically for these services? I reckon there might be a lot ...
0
votes
1answer
55 views

How do I create a TOR site for an already running HTTP server?

I have an HTTPS server made in JavaScript running on port 443 directly (not the best idea, but whatever). I would like to add an onion domain to this, how should I go about getting the data from the ...
0
votes
1answer
50 views

What is the difference of double onion and just onion?

Can anyone eli5 the difference of double onion and onion? How many hops will doubleonion use?
0
votes
2answers
60 views

How to get a specific name for my Tor hidden service? [closed]

Basically what the title says. I cannot find a tool that does it for me for Windows 10 in 2021.
0
votes
1answer
52 views

How do clients find what nodes to connect when connecting to a .onion link

I never seen a full explanation of how the server connects to these "introduction" nodes to the client, I understand the idea of the tor path ending with the exit node that's then resent ...
1
vote
1answer
143 views

Put Ed25519 keys in usable file format for Tor

I'm making an onion (v3) address generator in Python. Here is the part that generates the keypair: from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives....
0
votes
1answer
38 views

What are the botnets that can be used on tor?

I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
1
vote
2answers
80 views

Can't you DoS attack a hidden service by constantly shutting down its introduction points?

I know that it's infeasible for you to find the ip of a hidden service nor find the clients that connect to said service. However, as far as I understand, the ips of a hidden service's introduction ...
0
votes
1answer
47 views

Tor protocol server-side

I am trying to understand the protocol used when a hidden service establishes itself on the Tor network. I read multiple documentations about it, but its not all clear to me. If I understand correctly,...
1
vote
0answers
64 views

Connection not secure warning when connecting to .onion domain with Tor Browser

I have self-hosted Discourse based forum, available over .onion domain only (Hidden Service Version 3). Everything works as expected, however when I connect to the forum with an up to date version of ...
0
votes
1answer
81 views

HSv3 openvpn server setup

Until now i have run an opevpn server over Tor as a Hidden Service v2 on port 443 tcp. Am now trying the same with v3 Hidden Service and the connection is timing out. I note that the HSv3 creates a ...
0
votes
3answers
95 views

Who can determine the guard-node of a hidden-service?

If someone hosts a hidden-service, then the hidden-service obviously knows its guard-node. I would guess the guard-node knows that it is the guard-node of the tor-application which is used by the ...
0
votes
1answer
44 views

What is the authorization cookie of a .onion address?

I was reading the svn-archive (Section 5.2) to understand how a .onion address is generated. From my understanding, the "x.y.onion" address, comprises 'x' as 'the authorization cookie', and '...
3
votes
1answer
67 views

Node.js in a hidden service?

Is it safe to use Node.js as the backend language of a hidden service? Or is it a poor choice when compared to languages such as PHP and/or Python?
0
votes
1answer
57 views

When the domain is called, port 8080 is attached?

I am trying to create a hidden service in TOR this due to learning reasons. It all seems to work fine when I want to use this normally with HTML. But as soon as I want to install a dynamic web ...
0
votes
0answers
22 views

Is it possible running several hidden services in same server but using different Tor processes?

I am aware that you can run different server instances on the same server but, as far as I know, they are sharing the same tor process. Let's see I have a server with 8 cpu cores and 16GB RAM and i ...
0
votes
0answers
61 views

Tor and i2p tradeoffs

Bitcoin Core supports running onion service and recently added i2p. I want to understand the trade-offs in using different combinations of networks, so asked a question in Bitcoin SE earlier: https://...
1
vote
1answer
48 views

How to allow hidden services on a port whilst blocking the port on a local wifi?

While hosting a hidden service, e.g. a website on port 5678 from a device with a local ip address of 123.4.5.67 and a public ip4 address of the gateway of 78.9.0.12, I noticed that if one is ...
0
votes
1answer
54 views

When connecting to a hidden service, which relay contains information about the circuit used on the hidden service side?

I know that a client needs to establish a rendezvous point in order to connect to a hidden service but the rendezvous points neither knows the hidden service nor can it decrypt the data. If it doesn't ...
0
votes
0answers
36 views

Multiple hidden services on one server

How is it that I can host multiple (static) hidden services on one server? I am just needing 3 simple and static HTML sites with their own .onion? If I add multiple HiddenServiceDir do they have to be ...
0
votes
0answers
43 views

How do hidden services detect Tor2Web and similar proxy services?

Apparently, Tor hidden services can detect proxies such as Tor2Web: How can hidden services do this? What is the exact process they use to detect these proxies? Image source: https://www.howtogeek....
0
votes
1answer
69 views

How can I find the IPs of introduction points for a hidden service?

I was wondering if it is possible to find the IPs of introduction points used by a hidden service. Specifically I was looking at facebook's hidden service.
0
votes
0answers
56 views

mkp224o generates keys as garbled text

When I generated some vanity addresses to test the app, I noticed that when I tried to read the keys with VIM it came out as garbled text. Here's the public key for one of the test onion addresses. == ...
0
votes
2answers
284 views

internet banking over tor

If tor and tor .onion sites are more private than clearnet, why does no online banking use .oinon or https .onion websites? Wouldn't internet banking want the most private websites available, or do ...
0
votes
1answer
28 views

V2 Domain RSA Private not working

I'm trying to connecting venify v2 domain with tor hidden_service. I'm using eschalot and shallot for generate domains. but when I change domain name in hostname and replace private_key. It stop ...
0
votes
1answer
85 views

Can hidden service owners sell their domain?

I'm still learning about hidden services and I was wondering if hidden service domains could be on sale. I've seen websites on the clearnet such as http://thisdomainisforsale.com/, that are selling ...
0
votes
1answer
152 views

Can captchas expose hidden services? And how?

I heard that the server location of the Silk Road hidden service was caught by employing an IP leak caused by a Captcha prompt on the site's login page. That got me a little confused. Aren't captchas ...
0
votes
1answer
115 views

Does using a hidden service mirror of a clearnet site improve the privacy/anonymity of the user (generally)?

Some clearnet sites are also available as hidden services such as DuckDuckGo, Ahmia, and Z-Library. Would using their Tor hidden service instead of their clearnet website increase your privacy/...
0
votes
2answers
288 views

How come Facebook has an onion domain with 15 custom letters?

https://facebookcorewwwi.onion I was told a computer would take millions of years to generate such custom domain. Obviously, that is not true, unless you have got a good piece of hardware. Although, ...
4
votes
0answers
71 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
1
vote
1answer
111 views

Can onion service owners prevent their site from being indexed by darknet search by using a meta tag?

There are many multiple darknet search engines including Ahmia.fi and Torch. These darknet search engines index new hidden services every day. Can darknet site owners use: <meta name="...
0
votes
1answer
353 views

Why does the Tor browser come with DuckDuckGo (normal) as the default search engine and not DuckDuckGo onion?

After installing the Tor browser, the user's default search engine is https://duckduckgo.com. However, it make more sense for the user to search with DuckDuckGo's onion service. This way all the ...
0
votes
2answers
124 views

Are .onion sites decentralized?

Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com ...
1
vote
1answer
201 views

Would a url shortened link redirecting to a hidden service be considered part of the dark web?

https://tinyurl.com/ allows you to shorten URLs. Suppose I shorten the hidden service for DuckDuckGo (https://3g2upl4pq6kufc4m.onion/) to make it: https://tinyurl.com/2lxqxljq. This link redirects to ...
1
vote
1answer
17k views

Does Torch, a darknet search engine, really index 1 billion hidden services?

Torch is a darknet search engine (URL: http://cnkj6nippubgycuj.onion/). It indexes new hidden services every day. You can search anything on it (it's uncensored). It's the oldest and longest running ...
0
votes
1answer
544 views

What's the difference between darknet, clearnet and hidden services?

Hidden services and darknet seem to be conjoined concepts, although distinct as the former seems to be a feature of the latter, not vice versa. But the description of the "clearnet" tag ...
1
vote
0answers
87 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
0
votes
1answer
68 views

When new versions of the tor client stop supporting v2 addresses, will old clients still be able to access v2 addresses?

I have an application that uses v2 addresses-- if both ends (the hidden-service client and the hidden-service server) continue to use older tor client software (that "supports v2 addresses"),...
0
votes
1answer
172 views

What type of search engine is DuckDuckGo?

I've always been told DuckDuckGo is a clearnet search engine. However, in some of my recent searches on researching onion services I've managed to get search results with an onion service URL. I've ...
1
vote
1answer
32 views

I'm blind, how can I figure out the captas on Tor sights?

Often times when making an account there is a CAPTCHA and they don't have an audio alternative. How can a blind person get around this as it can cause issues for a blind person wanting to speak with ...
0
votes
2answers
296 views

Search engine optimization for .onion sites

Torch is an example of a darknet search engine. How can search engine optimization (SEO) be done to make an .onion site appear at the top of search results? how is darknet SEO different than regular ...
0
votes
0answers
158 views

How is a .onion URL resolved?

I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?
2
votes
1answer
76 views

Month-long bitcoin subscription on .onion sites: How are returning subscribers identified each day?

If a month-long subscription is paid in Bitcoin to an .onion site using Tor browser, how does that site still recognize/identify the same anonymous user when the return in subsequent sessions, given ...
0
votes
1answer
56 views

Is There Any Way to Specify URL Hashing Algorithm?

Long-story short, I'm building a social network, where each of my users has an onion address, and can sign their status updates with their private keys (so their friends can share them when they're ...
0
votes
1answer
113 views

Cannot run tor as a su on Ubuntu 20.04 with an apache2 server

I am trying to set up a .onion website but I am experiencing some issues in doing so. I set up a apache2 server and configed the torrc file, but when I save the changes on the torrc file and try to ...

1
2 3 4 5
12