Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
0
votes
1answer
40 views

How do clients find what nodes to connect when connecting to a .onion link

I never seen a full explanation of how the server connects to these "introduction" nodes to the client, I understand the idea of the tor path ending with the exit node that's then resent ...
1
vote
1answer
67 views

Put Ed25519 keys in usable file format for Tor

I'm making an onion (v3) address generator in Python. Here is the part that generates the keypair: from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives....
0
votes
1answer
27 views

What are the botnets that can be used on tor?

I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
1
vote
2answers
59 views

Can't you DoS attack a hidden service by constantly shutting down its introduction points?

I know that it's infeasible for you to find the ip of a hidden service nor find the clients that connect to said service. However, as far as I understand, the ips of a hidden service's introduction ...
0
votes
1answer
40 views

Tor protocol server-side

I am trying to understand the protocol used when a hidden service establishes itself on the Tor network. I read multiple documentations about it, but its not all clear to me. If I understand correctly,...
1
vote
0answers
53 views

Connection not secure warning when connecting to .onion domain with Tor Browser

I have self-hosted Discourse based forum, available over .onion domain only (Hidden Service Version 3). Everything works as expected, however when I connect to the forum with an up to date version of ...
0
votes
1answer
56 views

HSv3 openvpn server setup

Until now i have run an opevpn server over Tor as a Hidden Service v2 on port 443 tcp. Am now trying the same with v3 Hidden Service and the connection is timing out. I note that the HSv3 creates a ...
0
votes
3answers
63 views

Who can determine the guard-node of a hidden-service?

If someone hosts a hidden-service, then the hidden-service obviously knows its guard-node. I would guess the guard-node knows that it is the guard-node of the tor-application which is used by the ...
0
votes
1answer
37 views

What is the authorization cookie of a .onion address?

I was reading the svn-archive (Section 5.2) to understand how a .onion address is generated. From my understanding, the "x.y.onion" address, comprises 'x' as 'the authorization cookie', and '...
3
votes
1answer
50 views

Node.js in a hidden service?

Is it safe to use Node.js as the backend language of a hidden service? Or is it a poor choice when compared to languages such as PHP and/or Python?
0
votes
1answer
44 views

When the domain is called, port 8080 is attached?

I am trying to create a hidden service in TOR this due to learning reasons. It all seems to work fine when I want to use this normally with HTML. But as soon as I want to install a dynamic web ...
0
votes
0answers
19 views

Is it possible running several hidden services in same server but using different Tor processes?

I am aware that you can run different server instances on the same server but, as far as I know, they are sharing the same tor process. Let's see I have a server with 8 cpu cores and 16GB RAM and i ...
0
votes
0answers
52 views

Tor and i2p tradeoffs

Bitcoin Core supports running onion service and recently added i2p. I want to understand the trade-offs in using different combinations of networks, so asked a question in Bitcoin SE earlier: https://...
1
vote
1answer
45 views

How to allow hidden services on a port whilst blocking the port on a local wifi?

While hosting a hidden service, e.g. a website on port 5678 from a device with a local ip address of 123.4.5.67 and a public ip4 address of the gateway of 78.9.0.12, I noticed that if one is ...
0
votes
1answer
44 views

When connecting to a hidden service, which relay contains information about the circuit used on the hidden service side?

I know that a client needs to establish a rendezvous point in order to connect to a hidden service but the rendezvous points neither knows the hidden service nor can it decrypt the data. If it doesn't ...
0
votes
0answers
33 views

Multiple hidden services on one server

How is it that I can host multiple (static) hidden services on one server? I am just needing 3 simple and static HTML sites with their own .onion? If I add multiple HiddenServiceDir do they have to be ...
0
votes
0answers
32 views

How do hidden services detect Tor2Web and similar proxy services?

Apparently, Tor hidden services can detect proxies such as Tor2Web: How can hidden services do this? What is the exact process they use to detect these proxies? Image source: https://www.howtogeek....
0
votes
1answer
59 views

How can I find the IPs of introduction points for a hidden service?

I was wondering if it is possible to find the IPs of introduction points used by a hidden service. Specifically I was looking at facebook's hidden service.
0
votes
0answers
44 views

mkp224o generates keys as garbled text

When I generated some vanity addresses to test the app, I noticed that when I tried to read the keys with VIM it came out as garbled text. Here's the public key for one of the test onion addresses. == ...
0
votes
2answers
209 views

internet banking over tor

If tor and tor .onion sites are more private than clearnet, why does no online banking use .oinon or https .onion websites? Wouldn't internet banking want the most private websites available, or do ...
0
votes
1answer
25 views

V2 Domain RSA Private not working

I'm trying to connecting venify v2 domain with tor hidden_service. I'm using eschalot and shallot for generate domains. but when I change domain name in hostname and replace private_key. It stop ...
0
votes
1answer
80 views

Can hidden service owners sell their domain?

I'm still learning about hidden services and I was wondering if hidden service domains could be on sale. I've seen websites on the clearnet such as http://thisdomainisforsale.com/, that are selling ...
0
votes
1answer
124 views

Can captchas expose hidden services? And how?

I heard that the server location of the Silk Road hidden service was caught by employing an IP leak caused by a Captcha prompt on the site's login page. That got me a little confused. Aren't captchas ...
0
votes
1answer
99 views

Does using a hidden service mirror of a clearnet site improve the privacy/anonymity of the user (generally)?

Some clearnet sites are also available as hidden services such as DuckDuckGo, Ahmia, and Z-Library. Would using their Tor hidden service instead of their clearnet website increase your privacy/...
0
votes
2answers
230 views

How come Facebook has an onion domain with 15 custom letters?

https://facebookcorewwwi.onion I was told a computer would take millions of years to generate such custom domain. Obviously, that is not true, unless you have got a good piece of hardware. Although, ...
4
votes
0answers
66 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
1
vote
1answer
89 views

Can onion service owners prevent their site from being indexed by darknet search by using a meta tag?

There are many multiple darknet search engines including Ahmia.fi and Torch. These darknet search engines index new hidden services every day. Can darknet site owners use: <meta name="...
0
votes
1answer
297 views

Why does the Tor browser come with DuckDuckGo (normal) as the default search engine and not DuckDuckGo onion?

After installing the Tor browser, the user's default search engine is https://duckduckgo.com. However, it make more sense for the user to search with DuckDuckGo's onion service. This way all the ...
0
votes
2answers
96 views

Are .onion sites decentralized?

Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com ...
1
vote
1answer
122 views

Would a url shortened link redirecting to a hidden service be considered part of the dark web?

https://tinyurl.com/ allows you to shorten URLs. Suppose I shorten the hidden service for DuckDuckGo (https://3g2upl4pq6kufc4m.onion/) to make it: https://tinyurl.com/2lxqxljq. This link redirects to ...
1
vote
1answer
10k views

Does Torch, a darknet search engine, really index 1 billion hidden services?

Torch is a darknet search engine (URL: http://cnkj6nippubgycuj.onion/). It indexes new hidden services every day. You can search anything on it (it's uncensored). It's the oldest and longest running ...
0
votes
1answer
356 views

What's the difference between darknet, clearnet and hidden services?

Hidden services and darknet seem to be conjoined concepts, although distinct as the former seems to be a feature of the latter, not vice versa. But the description of the "clearnet" tag ...
1
vote
0answers
81 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
0
votes
1answer
61 views

When new versions of the tor client stop supporting v2 addresses, will old clients still be able to access v2 addresses?

I have an application that uses v2 addresses-- if both ends (the hidden-service client and the hidden-service server) continue to use older tor client software (that "supports v2 addresses"),...
0
votes
1answer
150 views

What type of search engine is DuckDuckGo?

I've always been told DuckDuckGo is a clearnet search engine. However, in some of my recent searches on researching onion services I've managed to get search results with an onion service URL. I've ...
1
vote
1answer
31 views

I'm blind, how can I figure out the captas on Tor sights?

Often times when making an account there is a CAPTCHA and they don't have an audio alternative. How can a blind person get around this as it can cause issues for a blind person wanting to speak with ...
0
votes
2answers
246 views

Search engine optimization for .onion sites

Torch is an example of a darknet search engine. How can search engine optimization (SEO) be done to make an .onion site appear at the top of search results? how is darknet SEO different than regular ...
0
votes
0answers
103 views

How is a .onion URL resolved?

I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?
2
votes
1answer
73 views

Month-long bitcoin subscription on .onion sites: How are returning subscribers identified each day?

If a month-long subscription is paid in Bitcoin to an .onion site using Tor browser, how does that site still recognize/identify the same anonymous user when the return in subsequent sessions, given ...
0
votes
1answer
51 views

Is There Any Way to Specify URL Hashing Algorithm?

Long-story short, I'm building a social network, where each of my users has an onion address, and can sign their status updates with their private keys (so their friends can share them when they're ...
0
votes
1answer
82 views

Cannot run tor as a su on Ubuntu 20.04 with an apache2 server

I am trying to set up a .onion website but I am experiencing some issues in doing so. I set up a apache2 server and configed the torrc file, but when I save the changes on the torrc file and try to ...
3
votes
1answer
436 views

What are the requirements for onion v3 sites?

What is requirements for Onion v3 sites? Greetings to the experts! I'm not can open any v3-sites (htt_://56characters.onion), but only v2-sites (htt_://16characters.onion) My noob brother must do ...
1
vote
1answer
30 views

Is the cell at the rendezvous encrypted with only the symmetric key exchanged with the HS?

My question pertains to the scenario after the client and the HS have exchanged a symmetric key. So, we have the following circuit: Client -- c_relay_1(guard) -- c_relay_2 -- RP -- s_relay_3 -- ...
1
vote
1answer
2k views

Switch from v1 or v2 to v3 address on hidden service

I am currently trying to run a hidden service on my kali laptop. Everything is working fine, except the address, which I have been poking around for 2 days trying to get a custom one. I only have ...
0
votes
0answers
20 views

I am not able to set a custom Domain for my Hidden Service on Kali

I currently have tor installed on my Kali Linux laptop, I am trying to run a hidden service. Everything is working fine except I can't set a custom onion address. I have shallot installed and I ...
0
votes
0answers
18 views

Does the introduction point (IP) know the hidden service Master identity key in v3?

I'm reading https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt and it appears to me that the IP no longer receives a hidden service public key (what is now known as Master identity key), ...
0
votes
1answer
37 views

Different ports or different hidden services?

Talking in terms of privacy, is it better to use the same .onion domain, mapping different ports to the same .onion or is it better to generate different hidden services?
0
votes
0answers
44 views

How to configure Haproxy to work with Tor on a VPS?

Haproxy is already installed on the server. My torrc configuration. HiddenServiceDir /var/lib/tor/OS/ HiddenServicePort 80 127.0.0.1:8040 HiddenServiceVersion 3 ControlPort 9051
0
votes
1answer
89 views

How do I reuse the onion address of a hidden service

I first want to generate a service and save the private key for reuse if one hasn't already been generated and saved, and if one has been generated and saved I want to be able to load it again if ...
0
votes
0answers
29 views

Managed proxy '/usr/bin/obfs4proxy' did not configure the specified outgoing proxy and will be terminated

Lately I have been trying to set up an obfs4 bridge on local area network.When running tor service,the log would show some message like this and the obfs4 loaded failed.What should i do?

1
2 3 4 5
12