Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

17
votes
3answers
71k views

Where I can find, export or download the biggest list of all .onion addresses?

Where or how I can find, export or download the biggest list of all hidden service .onion addresses?
9
votes
1answer
49k views

Most .onion sites I am trying to access are unavailable: Why and how can I solve this? [duplicate]

I think that 80% of the onion sites I'm trying to reach are most of the time (if not always) unavailable. It tells me that Firefox can't estabilish a connection to the server at *****.onion and ...
35
votes
6answers
5k views

Can a hidden service be hosted by multiple instances of Tor?

Is it possible for multiple Tor clients, running on different machines or even networks, to publish the same Tor hidden service using the same private key to load balance requests between them?
2
votes
2answers
156 views

Which node(s), if any, in the circuit for a hidden service, can see the URI of a request to a hidden service?

I understand that all of the communication between a client and a hidden service (.onion) takes place within the Tor network and is therefore end-to-end encrypted. What I am wondering, however, is how ...
59
votes
1answer
26k views

How do onion addresses exactly work?

I understand that the .onion address is a public key of sorts, but not much more than that (I can vaguely guess, though). When nobody knows the IP of the .onion address, how do requests reach it? Are ...
12
votes
1answer
283k views

How do I find onion sites?

I heard one of my more software savvy friends at work telling me about the Tor Browser and about the deep web. I'm curious to find out what I can see. But I can't actually figure out how to get there. ...
18
votes
2answers
2k views

How do Hidden Services get .onion domains that aren't random?

Hidden Services usually have a long-ish string of alphanumeric characters for their .onion address, and this is generated by Tor as part of the Hidden Service Configuration. How did some Hidden ...
12
votes
2answers
1k views

How many hidden services can I run on a single Tor instance?

I'm planning to run a service that will rely on hidden-services for anonymous data routing. Hence I will need to host a large number of them, sometimes in the same place. I have ideas about how to ...
11
votes
3answers
5k views

I got infected by ransomware, and it tells me to download Tor. What's going on?

I went to a dangerous website using an unpatched browser and/or risky plugins like Java, Flash, and Adobe Reader, and now something has taken over my computer and encrypted my files. It left me a note ...
19
votes
1answer
6k views

Is it possible to look up the public key for a .onion-address?

I know .onion addresses are a (partial) hash of a descriptor which contains a public RSA key, so I was wondering: it is possible to see the public key that is found when connecting to a .onion hidden ...
3
votes
1answer
7k views

How to anonymize the programs from the terminal?

How to anonymize the programs from your terminal (such as wget, curl, etc.)?
4
votes
1answer
1k views

Retrieving hidden service descriptors

just wondering if anyone can shed a lil light on this, basically i am wondering what processes must be followed to allow alice to retrieve the descriptors for bobs hidden service, what packets are ...
12
votes
2answers
4k views

How to use Hidden Service Authentication?

How can Hidden Service Authentication be used? I never saw documentation about that anywhere.
5
votes
1answer
2k views

When using custom keys, what permissions do “/var/lib/tor/hidden_service/” need?

I have generated a custom onion hostname and key using eschalot. Tor will run fine on the default hostname (the one Tor generated itself), but not with my custom domain. The problem is with the ...
21
votes
1answer
651 views

What are the implications of a Relay hosting a Hidden Service?

Are there any implications if whilst running a non-exit relay, I also use the same machine to host a Hidden Service? Specifically: How will this affect the anonymity of the Hidden Service (in terms ...
9
votes
4answers
3k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
6
votes
1answer
5k views

Free static web hosting inside the Tor hidden services network

Do anyone know of any free (as in no payment, no ads, and no invites needed) web hosting provider inside the onion network currently? Or did everything die with Freedom Hosting? I don't want anything ...
5
votes
2answers
5k views

Developing a Tor library

I want to incorporate Tor in my application in order to access a Tor hidden service. Make GET POST requests to the web server. Is there any resource I can read to implement a simple Tor client that ...
15
votes
3answers
2k views

Is it known if Tor communication deanonymization played role in Ross Ulbricht arrestment and Silk Road store takedown?

On October 2, 2013 Ross William Ulbricht was identified by FBI as the Silk Road black market website owner and was arrested. Silk Road was operated as a hidden service on the Tor network. See also: ...
10
votes
1answer
1k views

Hidden .onion service with 2048 bit (or 4096 bit) RSA private key — how to host it?

2048 bit RSA is proven to be more secure than 1024 bit, so with the help of Scallion I have generated a pair of hidden service hostname + 2048 bit private key for it (there were 1024b 2048b and 4096b ...
11
votes
1answer
3k views

How to protect a hidden service against DDOS attack?

How to protect a hidden service against DDOS attack? I did some research and found that it is possible to do load balancing with HAProxy. Is there any other solution that could be implemented?
3
votes
1answer
224 views

Tor can't access its dir?

I've tried to set up a tor hidden service on /var/hidden. And after chmod-ing it to 777 and chown-ing it to debian-tor it still won't work. Why is that? Why doesn't it have permission to write to ...
6
votes
2answers
1k views

What is the reasoning behind keeping hidden service onion RSA keys at 1024 length?

Is the cost to performance of using larger key length not cost effective? How would it negatively impact anyone if some hosts decided to use a larger key length (i.e. Why isn't anyone free to manually ...
5
votes
3answers
3k views

How does “HiddenServiceAuthorizeClient” work?

Reading here I understand that only clients that are listed are authorized to access the hidden service, but how does it work? I mean, is my hidden service really hidden? If a client is not ...
3
votes
1answer
222 views

Are there proxies like Tor2Web but not just for http connections?

Tor2Web allows access to Hidden services from clearnet. However I would like to know if there some other gateways which will allow connections to hidden services on custom port and allows different ...
3
votes
1answer
959 views

Running multiple hidden services in nginx

I would like to setup 3 hidden services on the same computer with nginx. My torrc looks like this: DataDirectory /var/lib/tor HiddenServiceDir /var/lib/tor/hidden_service/ HiddenServicePort 80 ...
1
vote
1answer
464 views

Registering .onion with Certificate Authority?

Is it possible to register my onion with LetsEncrypt? I'm using Arch. If no, why not? Thanks!
1
vote
2answers
1k views

How to perform NAT Punching with Tor

I learned from a video that NAT punching is one of the features of Tor. I run GNU/Linux Ubuntu 16.4. I have already installed Tor. It will be great if someone can instruct me how to perform this ...
23
votes
5answers
8k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
10
votes
4answers
44k views

What are the best Tor2Web anonymous gateways?

What are the best Tor2Web anonymous gateways to make Hidden Web-Services available on clearnet/standard Internet?
25
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
20
votes
3answers
10k views

How to set up a Tor hidden service?

Seeing that I find the technical side of it extremely interesting, I want to try to set up a Tor hidden service. For this I am following the Torproject instructions. I installed Tor, have it running, ...
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
15
votes
2answers
6k views

Google indexing Onion hidden sites?

So I was searching to see what happened to Dread Pirate Roberts, the creator of underground marketplace Silkroad, and I came across something very strange; onion websites URLs being crawled by Google (...
20
votes
1answer
15k views

.onion Domains DNS lookup

How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
6
votes
3answers
2k views

Searching for Tor hidden networks

What resources are best for search .onion networks within the Tor? Unlike the web where you can search for a domain or portal, what equivalent systems are available for search for Tor specific ...
5
votes
4answers
7k views

Is there any bridge beetwen Tor and Freenet? Is there way to bridge Freenet site like a Tor hidden service?

Is there any bridge beetwen Tor and Freenet? Is there a way to bridge Freenet site like a Tor hidden service ( onion domain )? E.g. setting up site in Freenet network means, that this site splitted ...
15
votes
3answers
1k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
11
votes
1answer
281 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
7
votes
1answer
5k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
6
votes
1answer
975 views

What am I doing wrong? Attempting to host multiple Tor hidden services on one server

I am using centos 7 and apache with the latest version of Tor. When I add a second HiddenServiceDir line to the torrc file, not only does the second (or third or fourth) service not work, it also ...
6
votes
1answer
503 views

Vanity onion address not working properly

I have a hidden service with a normal onion address created by the tor program. I then made a vanity address using Scallion and added this to my Tor configuration as a second hidden service but ...
5
votes
1answer
185 views

How do I make sure my Tor hidden service gets trustworthy entry guards?

The Tor site's page about hidden service communication mentions that a given hidden service will always use the same set of entry guards: At this point it is of special importance that the hidden ...
4
votes
1answer
3k views

Can't connect to onion sites “hidden service is unavailable” [duplicate]

Everything is fine and Tor check displays "Congratulations. This browser is configured to use Tor." but I can't access any onion sites. please help! 15/11/2014 15:23:01 p.m..970 [NOTICE] Bootstrapped ...
4
votes
2answers
8k views

How can I anonymize my FTP traffic using the Tor network?

I want to make my ftp server visible only from Tor side.
4
votes
2answers
2k views

How can I run multiple hidden services with lighttpd?

I am trying to run two or more hidden services. My torrc seems to be fine, but I am having trouble with lighttpd.conf. My configuration file contains. $HTTP["host"] == "2uwvt4.onion" { server....
3
votes
1answer
308 views

Few questions about connecting to Tor hidden services

I am hoping some one can help expand my knowledge on how a user connects to a hidden service, I have read the specification, but have found it confusing and still have some questions. Sorry if any ...
3
votes
1answer
1k views

Launching a Distributed Denial of Service attack on a hidden service

Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these ...
3
votes
1answer
1k views

What's the difference between the Tor proxy and the Browser Bundle?

I have done some research on Tor the past few months, trying to learn more about it's infrastructure, and have been successful for the most part. However, there is something that I can't seem to find ...
3
votes
1answer
1k views

How does it work - “Hidden services”?

Could somebody describe to me, like for Nooo-oo-ob, from the Start and to the complete End. My questions are: I've setup HS. My Tor client connect to the rendezvous. Is it populate full onion ...