We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
0
votes
1answer
1k views

Block nodes in torrc hidden service

I used this torr config https://bitcointalk.org/index.php?topic=331077.0 ClientOnly 1 EnforceDistinctSubnets 0 UseEntryGuards 1 NumEntryGuards 8 GeoIPExcludeUnknown 1 EntryNodes AutonomyCube,...
0
votes
1answer
283 views

PHP keeps leaking IP address

I'm trying to setup a hidden service, I've tunneled my server though tor, however things like gethostbyname is leaking my real ip address, I have no clue why its doing that, while curl doesn't.... Is ...
0
votes
1answer
63 views

Old Tor users can affect my HS?

Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP?...
0
votes
2answers
1k views

Decrease number of hidden service hops?

Is there any way to reduce the length of a hidden service's path to the rendezvous point? Bob's hidden service <---> Introduction Point Alice <---> Introduction Point tell Bob to contact ...
8
votes
1answer
5k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
0
votes
2answers
843 views

What is the difference between a directory server and a hidden service database?

After reading how hidden services work it is not clear to me whether a hidden service database as shown in the figure bellow, is different from a directory server. On which port does it provide the ...
1
vote
0answers
341 views

How to change orbot android hidden service address?

I'm trying to get a new onion address for my hidden service on Orbot. The problem is it does not auto generate a hostname. How can I force this app to do so?
3
votes
1answer
1k views

block tor2web, onion.city,cab, .link etc

How would i block tor2web and proxies like that from my tor hidden services? Like a nginx rule or something to make sure no one can access my tor hidden service through these services.
6
votes
2answers
5k views

resolve .onion address from bash

I have tried using curl through tor like so curl --socks5 127.0.0.1:9050 XXXXXXXXXXXXXXX.onion This works for public addresses like stackoverflow.com but not for tor .onion addresses
1
vote
1answer
95 views

Accessing my hidden service through Tor me sends to the wrong port

I have a few hidden services on my Ubuntu Server using Nginx. My torrc looks something like this: HiddenServiceDir /var/lib/tor/hs1 HiddenServicePort 80 127.0.0.1:8081 HiddenServiceDir /var/lib/tor/...
0
votes
0answers
577 views

Is there a limit in the number of connections?

When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)? I am developing an application to check ...
0
votes
3answers
269 views

Connect to hidden service

Without using tor2web is there a way for my Java program to connect to a hidden service .onion and retrieve data, for example search and then download a file? I want the easiest solution possible, so ...
1
vote
1answer
586 views

Unstable websocket over Tor

I'm working on a Java application that uses websockets to communicate with a hidden service. So far I've managed to get it all working but websocket connection is unstable. Here's what I've done: ...
3
votes
1answer
224 views

Tor circuit chaining

Is it possible to use multiple tor circuits chained together? tor_circuit --> tor_circuit --> ... --> tor_circuit I know of a solution on windows using tortilla for windows that allows ...
5
votes
1answer
2k views

When using custom keys, what permissions do “/var/lib/tor/hidden_service/” need?

I have generated a custom onion hostname and key using eschalot. Tor will run fine on the default hostname (the one Tor generated itself), but not with my custom domain. The problem is with the ...
3
votes
1answer
800 views

Can a client accessing a Tor service bypass a firewall, and if so, why is it possible?

I was reading this article "Nine Questions about Hidden Services". It's an interview with an individual who develops hidden services for Tor. One of the questions (#4) is "Do you run an onion service ...
1
vote
0answers
40 views

Performance issues in single guard for hidden services

From what I can read in this recent post in the Tor blog, Hidden Services use one single guard, just as regular clients do. How does this affect the performance of hidden services? I know that since ...
3
votes
1answer
343 views

Can you set hidden service to use specific HSdir?

I am trying to understand what are possibilities of adversary running his own HSDir and few relays? Adversary cannot retrieve all the .onion addresses? Only the ones advertised on his HSDir? Are ...
1
vote
2answers
8k views

What's the difference between 80 and 8080 in torrc?

In torrc, I have come across both these lines: HiddenServicePort 80 127.0.0.1:80 vs HiddenServicePort 80 127.0.0.1:8080 Can anyone explain what their differences are?
3
votes
1answer
1k views

Running multiple hidden services in nginx

I would like to setup 3 hidden services on the same computer with nginx. My torrc looks like this: DataDirectory /var/lib/tor HiddenServiceDir /var/lib/tor/hidden_service/ HiddenServicePort 80 ...
1
vote
2answers
856 views

Would ssh hidden service be very slow?

Over at one of the guides on setting up hidden ssh service via tor, http://mancoosi.org/~abate/hidden-ssh-service-tor, it's claimed that due to all the layers of indirection it'll be really slow. ...
3
votes
0answers
303 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
2
votes
3answers
2k views

Does deepnet have only 7100 onion sites?

I have read this article on forbes claiming that deepnet has only 7100 onion sites and took only 3 hours to scan completely. Which to me sounds like total nonsense since if average .onion address is ...
3
votes
1answer
596 views

Can't access my hidden service

I have tried nginx and apache2. I have configured everything according to all the guides and my hidden service still won't come up. I've done port forwarding to the port I want apache or nginx to ...
1
vote
1answer
211 views

Retrieving addresses of hidden tor services

Is it practical to generate onion addresses and attempt to connect to them via the tor client or is there a better approach? How can one get an estimate of the number of services available?
1
vote
0answers
70 views

.Onion not viewable, apache2 is working

I've been trying to get a hidden service up and running for a while now. I've followed several guides and they all pretty much say the same thing. I've opened up the port that I have apache2 listening ...
5
votes
2answers
169 views

Risk of deanonymization running thousands of hidden service on same server

Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have ...
2
votes
0answers
651 views

Tor unexpectedly exits

I tried to start a hidden service on mac with MAMP and tor browser. I added the line HiddenServiceDir /Users/Gary/Desktop/tor_site HiddenServicePort 4023 127.0.0.1:4023 into my torrc file in ...
1
vote
3answers
167 views

Could hidden service connect to regular internet ?

If I run a hidden service on a computer that has a public ip adress and ssh into it, could I connect to the regular internet or all my outbound connections can just be into the tor network ?
0
votes
2answers
341 views

Is there a library to make use of Tor's features programatically?

When one wants to write an application that uses some of the features of Tor in a secure manner it would be helpful if there was a library to do so. I wonder if there is a library that provides ...
3
votes
3answers
1k views

Designing P2P application over Tor

I am building a P2P C++ application that uses tor as a socks proxy to connect to the internet. This P2P app will only connect to other users running the same application, so all the communication ...
1
vote
1answer
503 views

How do I generate .onion hostnames using PHP?

PHP can be used to generate a lot of addresses and private keys for use with Bitcoin. How about Tor? Can we use PHP to generate a Tor hostname?
2
votes
1answer
4k views

No .onion sites load

I cannot connect to any .onion sites. I have used both duckduckgo's onion link as well as the torproject's onion link as tests. I have read every thread and post related to this issue I can find, the ...
1
vote
1answer
260 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
1
vote
1answer
636 views

How do I host multiple hidden services in my server?

I know that to create more sites in Tor I add HiddenServiceDir and HiddenServicePort to my etc/tor/torrc file but how do I edit it in my server to listen to all of them and do I need to create new ...
1
vote
0answers
55 views

Can high network usage be detected and prevented in Tor?

I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. If so, what are the default prevention steps?
0
votes
1answer
1k views

I can't access any Tor links [duplicate]

Everytime I try to access any Tor website with .onion, this message appears Unable to connect Firefox can't establish a connection to the server at aaaaaaaaaa.onion. The site could be ...
1
vote
1answer
76 views

Prove ownership of a hidden service?

Is there any way to prove ownership of a hidden service without revealing it's private key? Maybe signing a message with the key? Also take into account that the service is not hosting anything that ...
-1
votes
2answers
322 views

How can I provide Tor browsing through my Wordpress site?

I'd like to create a page on my Wordpress site which features something like a frame where visitors to my site can browse the web through Tor. How would I go about constructing such a feature? I don'...
1
vote
0answers
186 views

Facebook's onion site and Adblock Plus

If you don't know already, you can use Adblock Plus scripts to modify how https://facebook.com/ works. And you can even do things to improve your privacy, such as disabling the "message seen" feature ...
1
vote
1answer
54 views

Is there a common way to contact the administrator of a .onion site?

I have bugs to report, but there is no obvious contact information on the page itself. I am asking if there are common places that people leave contact information or if there's some way I can leave ...
2
votes
2answers
113 views

How secure are hidden services port bindings?

On my system I have a secure service that is bound to localhost for commands. I do not want it accessible to Tor. It's bound to one port, lets say 876. I am running a hidden service that binds to one ...
1
vote
1answer
363 views

How is hidden service directory protected from DOS?

What is the maximum number of hidden services DHT (Distributed Hash Table) can hold? Who maintains the directory? What stops anyone from creating a huge list of hidden services (onion addresses) that ...
1
vote
2answers
337 views

What establishes the Rendezvous Point when connecting to a Hidden Service

On which side of the circuit does the RP get selected? Is it a random node that the client making the connection to the HS selects or something decided at one of the IPs or by the HS itself?
1
vote
0answers
218 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
0
votes
1answer
154 views

Can a tor hidden service be successfully attacked via (D)DoS?

I'm planning on creating a tor hidden service(in the context of a research project) and am wondering how resilient is it against common (D)DoS attacks(i.e. DNS amplification, UDP flood, etc.) given ...
2
votes
0answers
171 views

How do overlay network nodes communicate without IP addresses?

I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work? I looked through the documentation for each and neither is very clear on ...
3
votes
2answers
395 views

is the use of both introduction points and rendezvous points redundant?

One of the reasons for not using the introduction circuit for actuall communication is that no single relay should apppear to be responsible for a given hidden service. This is why rendezvous points ...
1
vote
1answer
510 views

Tor hidden service not able to connect [duplicate]

I just installed tor on a fresh ubuntu box, I've configured the hidden services part of the torrc file as follows: HiddenServiceDir /var/lib/tor/hidden_service/ HiddenServicePort 90 127.0.0.1:90 I'...
1
vote
0answers
303 views

Tor Hidden service directories DHT topology

what is the topology of the DHT used by Tor's hidden services ? and while i understand 6 nodes will be responsible for a single HS, how many nodes would a client need to visit before finding the ...