The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
2
votes
1answer
12 views

Hidden Service in TestingTorNetwork connected to non-Exit Nodes

I set up a testing environment made of lxd containers on Ubuntu 18.04. Each container is based on the Ubuntu 18.04 image and runs Tor version 0.4.1.6. Specifically, I have the following running ...
0
votes
0answers
11 views

DDoS attacks on cryptomarkets

Recently, the big cryptomarkets have been under DDoS attacks and one of their admin stated that the attack has been conducted by only one person (Reddit post). According to that person, the attacker ...
0
votes
1answer
20 views

Are contents of a hidden service secure if the service is HTTP?

If I host a hidden service without HTTPS, can a compromised exit node (on either server side or client side), read or write any contents of the site? Also, is it more secure to use HTTPS on a hidden ...
0
votes
1answer
23 views

tor adds its own private_key for hidden_service, hijacking my custom .onion

If I delete every key from my /srv/www/html directory and then add my own shalot generated private to the same directory, upon tor start, it adds it's own keys to the directory, and then hijacks ...
1
vote
1answer
37 views

hidden_services only works with invalid permissions

When I try to start tor with invalid permission, I get the following error: $ ./start-tor.sh [sudo] password for user: Oct 08 18:20:32.210 [notice] Tor 0.4.0.5 running on Linux with Libevent 2.0.21-...
0
votes
1answer
44 views

Tor Filetransfer (FTP) for Webhoster

i'm building a hidden service hosting provider, an actually im able to run a web-/ and Mysql Server full proxied over the tor network. But im wondering how i could realize a file-transfer protocoll ...
1
vote
1answer
95 views

TOR Hidden Service: IP anonymity

Suppose that a Tor client wants to access a certain hidden service. According to the protocol, instead of submitting a request directly to the server IP (which is hidden[1][2]), this client submit a ...
0
votes
2answers
673 views

How to setup Client Authorization for v3 Onion Services

The Tor 0.3.5 series includes client authorization for v3 onion services. Tor manual: To configure client authorization on the service side, the "/authorized_clients/" directory needs to exist. Each ...
1
vote
1answer
49 views

making request onion sites without tor

I made a simple server at my home hosted by tor. The server contains my personal files and i dont like paying services for hosting websites because hosting on tor is free and hidden. It doesn't matter ...
0
votes
1answer
16 views

Distributed Hash Table DHT minimum relays needed

(BLUF) How many relays are needed to create a workable TOR Distributed Hash Table? My original question was "what would cause the TB to log a valid HS name to be "invalid" and "rejected". After ...
0
votes
1answer
39 views

In onion v3 services, how does the client know the “HSDir” that have the necessary descriptor to connect to the onion service?

I've read the "Tor Rendezvous Specification - Version 3" and I can't find out how the client knows the "HSDir" nodes that store the onion service descriptor that indicates the introduction points ...
2
votes
2answers
69 views

Why doesn't curl download from file a onion service?

I am attempting to download a file from a hidden service using curl. I downloaded the Tor client and launched it and from another terminal executed this: curl --socks5 socks5://127.0.0.1:9050 https://...
-1
votes
0answers
34 views

How do i run a successful DoS attack? (Denial of Service). Also, is there a stack exchange only accessible on TOR? [closed]

Let me begin. I am extremely well at computer science principles, and I know my way around the internet very well. Anyways, I know a DoS attack is possible, and most likely extremely simple, but I've ...
0
votes
1answer
3k views

I need help viewing videos!

How does one view videos on Tor if it will not allow Flash? Is there another way? I have tried several sites, and I am not able to view any videos. What is the solution?
0
votes
2answers
78 views

Can a onion domain I register be discovered if I don't make it public?

This tutorial teaches how to register a hidden service and point it to a server's SSH port, so that we can keep this port closed on the open Internet and acess it from inside Tor network. Of course ...
2
votes
2answers
396 views

Does nginx need any additional configuration to run a hidden service safely?

I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that needs/should/is recommended to be done to run a hidden service safely?
0
votes
1answer
63 views

Are Tor connections *that* unstable?

I'm okay with the Tor network being slow, but I often have the issue that I can't connect to my own hidden services at all. I imagine the problem are the nodes in between, because sometime later then ...
0
votes
1answer
60 views

How to setup a local hidden service

How do i setup a private hidden service on localhost My question is how do i setup a private hidden service that can not be accessed by rest of the Tor network i wish to run this hidden service on my ...
2
votes
1answer
147 views

Can I run multiple hidden services without anyone knowing they are hosted on the same server?

I want to host multiple hidden services but I need it in a way that people cannot find out that they are all hosted on the same server. How could I do this?
2
votes
1answer
902 views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
0
votes
0answers
18 views

Questions about the onion v3 services keys

As far as I understand (if there is any error, please correct it), when configuring an onion v3 service, three files are generated: "hostname", "hs_ed25519_secret_key" and "hs_ed25519_public_key". The ...
0
votes
2answers
450 views

If Tor is backed by government

If Tor would be backed by government (https://www.zerohedge.com/news/2018-03-02/tor-project-almost-100-funded-us-government-report), which approach would they need to take to technically be able to ...
0
votes
1answer
161 views

Why not to add tor2web-like gateways to relays by default?

as it is said in this article https://blog.torproject.org/facebook-hidden-services-and-https-certs whatever it is you think Tor is for, I guarantee there's a person out there who uses it for ...
1
vote
1answer
255 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
0
votes
1answer
83 views

How can I learn more about the technical information about an onion service? (details in the body)

Sorry for the vague question in the title. I wanted to get to the point without loading up the title with unnecessary information. Essentially what I'm trying to ask is 2 questions: Logistically, ...
0
votes
1answer
63 views

Old Tor users can affect my HS?

Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP?...
0
votes
1answer
596 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
1answer
68 views

Missing History

Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters). What about Tor V1 addresses? What was its specification or why wasn't it used much or at all? Example: ...
0
votes
1answer
184 views

localhost wordpress won't load completely on tor browser

first , sorry for bad English i try to run a wordpress site on local machine and everything is ok but when i brows my site using tor browser page wont load completely an when i click on a link ,[![...
0
votes
1answer
591 views

Tor hidden service is not starting when starting as a daemon

I have a problem with my tor service. Whenever I start tor with command tor then it works and gives me the normal expected output (hidden service is running aswell). Nov 05 18:34:45.896 [notice] Tor ...
5
votes
3answers
10k views

It is possible to find a Tor page based on the 512-bit hash?

On the internet there is unsolved mystery of 3301/Cicada where decrypted text says: "AN END. WITHIN THE DEEP WEB TH ERE EXISTS A PAGE THAT HA SHES TO: 36367763ab73783c7af284446c ...
0
votes
1answer
35 views

Hosting companies that allow hosting a laravel application on tor

Are there any hosting companies that offer tor services for hosting a laravel application. Is it even possible to host a laravel application over tor? Also, compile my laravel application and then ...
0
votes
1answer
68 views

Tor relay giving false HSDir flag

Today my tor relay started reporting the HSDir flag out of nowhere. I do not have a hidden service configured. Is this something i should worry about? Everything looks fine, and i see no services ...
1
vote
1answer
207 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
0
votes
1answer
93 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
1
vote
1answer
105 views

hide IP from webserver software and PHP

I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it? If nginx and PHP can't know the current server IP, no ...
1
vote
1answer
658 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
0answers
66 views

What is a private Tor network

While reading about botnets leveraging Tor hidden services for command and control I came across a term I have never seen or read about anywhere a private Tor network I tried researching this term ...
1
vote
1answer
48 views

Why do so many HS devs use PHP?

There's a lot of talk that PHP is "inherently insecure" and "great if you want your site to get hacked". I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is ...
0
votes
1answer
195 views

My tor hidden service stopped working

I have successfully hosted my first .onion site on my Raspberry Pi by following this tutorial. For some reason I needed to stop running this site for a while. So I used this command sudo /etc/init.d/...
0
votes
1answer
541 views

How do I host a wordpress blog on tor?

How do I go about hosting a wordpress blog as a hidden service? Are there providers who will host it for me? Or will I have to configure it myself?
0
votes
1answer
176 views

I have setup tor on Ubuntu 16.04 using Apache2 It works for an http site, but, I want to make it and https site.

In researching how to do this I notice that I have to purchase an ssl certificate to get it to work. Is this the only way to do this? I am running the onion server from my home computer. It is not ...
0
votes
1answer
194 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
0
votes
1answer
68 views

Run onion service from tor browser

I was wondering if it would be possible to connect two tor browser directly. This would be great for P2P applications running in the browser. I was wondering something like one browser creating a ...
0
votes
2answers
333 views

Is there a library to make use of Tor's features programatically?

When one wants to write an application that uses some of the features of Tor in a secure manner it would be helpful if there was a library to do so. I wonder if there is a library that provides ...
0
votes
3answers
330 views

What are all the suffixes for websites exclusive to Tor, or at least should be opened only on Tor, and how do I find more?

I just started using the Tor Browser and Orbot on my smartphone and would like to find out what I can do with it. Is there a lot of different Legal and Illegal services?
2
votes
2answers
202 views

Are there hosts for hidden services?

I am exploring putting up a simple page as a hidden service advertising business formation and nominee services. Does anyone offer hosted pages? I think I don't really need an entire site, just a way ...
0
votes
1answer
61 views

ssh as hidden service - username passed in clear?

I have set up sshd on my box as a hidden service. I'm wondering if, when I torify ssh uname@xxxxxxxxxxxxx.onion is the user-name passed in the clear?
3
votes
1answer
113 views

Does Tor still monitor “shadow” relays?

I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
2
votes
1answer
127 views

Onion service and dynamic IP

I saw on Tor's FAQ that a Tor Relay can work well with a dynamic IP, I was wondering if it's the same for a service or if it would be sometimes unreachable ?