Questions tagged [onion-services]
Questions relating to Tor Onion Services
613
questions
0
votes
1
answer
51
views
A Question about implementation of Perfect Forward Secrecy
How can be Perfect Forward Secrecy explained in the context of tor network?
How does the concept of Perfect Forward Secrecy (PFS) apply to onion routing, and why is it critical for the security of the ...
1
vote
1
answer
343
views
How to get the hostname from hs_ed25519_secret_key
I'm trying to compute the v3 onion address (hostname) from the hs_ed25519_secret_key file generated by tor itself in python. I know i can just copy that file to the hidden_service dir and start tor so ...
- 13
0
votes
1
answer
113
views
Using a compiled language instead of PHP
I was planning on writing my Tor service in PHP. But I am wondering if it would be a good idea to write it in a compiled language like C++ or Rust.
The Tor service will run on a VPS hired by a hosting ...
- 1
0
votes
1
answer
25
views
Keyrings used for installation
I have fairly simple question regarding step 3. and step 4. in the following guide:
https://support.torproject.org/apt/tor-deb-repo/
Do they depend on each other? I tried to install Tor without step 4....
- 1
0
votes
1
answer
114
views
Bridge for Onion site
It's possible to use a bridge on Tor to hide the fact that you are using Tor. Is it also possible to have a bridge on your .onion site to hide the fact that you are hosting one? If so, how can this ...
- 105
0
votes
1
answer
40
views
v3 compatible Tor client
I am developing a tiny tor client and I need a project that is up-to-date and can browse v3 onion domains; to make it example of my own development. There are some, but almost all of them are outdated ...
- 101
0
votes
1
answer
32
views
Tor fails looking for /root/.tor
This starts up Tor correctly:
sudo -u debian-tor /usr/sbin/tor --runasdaemon 0 -f /etc/tor/torrc
But when I try the same from supervisord
[program:tor]
command=/usr/sbin/tor --runasdaemon 0 -f /etc/...
- 3
0
votes
1
answer
111
views
Allow only tor traffic
I was thinking about how to block outgoing traffic on a server hosting a hidden service. I could lock down this server via iptables, but that does nothing for me if someone gets root (still gonna do ...
- 1
0
votes
1
answer
408
views
The onion link cannot be accessed
I can't access onion links that I could access before. I tried using another computer and they still work. When I try to log in I get the error Details: 0xF0 — The requested onion service descriptor ...
0
votes
1
answer
69
views
Measurements to deploy a Tor Service anonymously
I am planning on creating a new Tor service. It will be a website made in PHP/Laravel/Symfony, a database like MySQL and there will be a payment system for Monero transactions.
I'm already familiar on ...
- 3
0
votes
1
answer
37
views
does onion sites uses any standard for blocking crawler
does onion sites uses robot.txt files to hide or restrict crawlers? as i know normal webservices uses robot.txt files to stop google crwaler from knowing more about the website or limitaions. so does ...
0
votes
0
answers
71
views
Tor onion domain: should the secret key be expanded?
When generating a tor address domain and keys the secret key must be additionally "expanded":
specification for key expansion: https://github.com/torproject/torspec/blob/...
- 111
0
votes
1
answer
146
views
Tor onion service: why the public key file is needed?
I created an onion v3 service and the Tor created three files for it: private and public keys and hostname.
The private key is actually contains the public key internally. So why do we need the public ...
- 111
1
vote
1
answer
77
views
If I compile Tor to use 2 hops circuits, will it make 2 hops circuits to non-anonymous hidden services?
I know that Tor introduced options for setting up a non-anonymous hidden service, Cloudflare hidden resolver is an example of a non-anonymous one.
I built a Tor binary to use 2 hops circuits for ...
- 23
0
votes
1
answer
85
views
mkp224o v3 onion link get overwritten by tor
Firstly, I'm using windows.I created the hostname, secret key and public key on windows. When I changed it, tor rewrites it every time I reopen tor.
i replaced these 3 files with the keys i got from ...
0
votes
1
answer
69
views
Should I use the same server for webserver and the database?
I want to start hosting my hidden service and be as secure as possible.
It is currently just some PHP Code and a MySQL database.
Now I am wondering if I need a external server to host my database or ...
0
votes
1
answer
105
views
Is an .onion service aware of its own circuit?
So I understand that when a user logs into an onion service, they are logged as ”127.0.0.1” and port
now, does the onion service log the relays or know what relays it connected to in order to ...
0
votes
1
answer
123
views
Can a Hidden Service track you the same way an exit node can?
imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
0
votes
1
answer
469
views
How can I disable Tor's automatic IP circuit renewal process?
I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the ...
1
vote
1
answer
366
views
burpsuite onion http request intercept
I have an Onion Website, and i want to try and exploit it to find the Real IP-Address behind this Service.
The problem:
'Cannot intercept Traffic from .onion' i also used this Settings in BurpSuite:
...
1
vote
1
answer
106
views
Onionbalance: Got the wrong number of responsible HSDirs: 5. Aborting
I have a hidden service with OnionBalancer. Service has been running for a long time but lately the OnionBalancer just stopped. From the logs:
[INFO]: Initialized hash ring of size 3906 (blinded key: ...
- 11
0
votes
1
answer
17
views
When I go to install the demo content in the tools and click on Install the template that I uploaded,in wordpris it is not wanted, and I see this sign
I want a solution, please. Yesterday I downloaded the template from Team Forest, and I want to install it, but whoever has the situation does not respond, please contact me.
3
votes
1
answer
154
views
Is it possible to a onion server to be censored?
I can see from the answer to "How exactly do onion addresses work" that the tor protocol needs to upload the hidden service descriptor in item 6, to a distributed hash table (DHT). Is it not ...
- 31
0
votes
1
answer
386
views
Why I can't open any onion link on TOR?
I am not able to open any .onion link on my Tor browser, I tried everything but don't understand what I missed. I also tried to open https://facebookcorewwwi.onion/ but I can't.
Please help me and ...
- 1
2
votes
1
answer
51
views
Private key in bash history a security issue?
Assume I generate a Private key for a hidden service. Assume I receive it in base64 encoding (this can happen for example by using shallot and posting the results to stdout). Assume I install tor and ...
1
vote
1
answer
118
views
How can I configure https for .onion in XAMPP?
I've reviewed and reread several guides on how to make https for localhost in xampp, but replacing localhost in the configuration with my .onion name didn't help me set it up as https - it just won't ...
- 11
0
votes
1
answer
76
views
Unable get hidden service address
I followed this post:
https://www.privex.io/articles/setup-tor-hidden-service-website/
to create a local lan website with ubuntu.
But After I configurated and restarted the tor service.
No hostname ...
- 1
0
votes
1
answer
336
views
How to set hop count to 1?
I have set up an onion service to access my local network without forwarding ports. The service doesn't need to be anonymous and I am the only one accessing it (client authentication). So I want to ...
- 103
0
votes
0
answers
92
views
Hidden service setup
Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished ...
1
vote
2
answers
775
views
Why Tor Onion Service doesn't need port-forwarding, nor a configuration at the firewall?
Let us say, a client with Tor browser tries to connect to my .onion web-server, both the client and the server will create Tor circuits and meet at the Rendezvous-Point, for now I hope I'm right.
The ...
- 13
0
votes
1
answer
42
views
Tor traffic modify in my local server
Sorry about my poor English.
I am a newbie in tor development and installed Test Onion Service on my local computer and tested it.(https://www.jamieweb.net/blog/onionv3-hidden-service/)
Using tor ...
1
vote
0
answers
136
views
Which V2 .onion services are still running?
Can you share any V2 .onion hidden services that are still up and running?
I am doing a research project and looking into how difficult it is for an older Tor client to reach a V2 hidden service now ...
- 11
0
votes
1
answer
514
views
I can't find TOR icon or app
I want to uninstall TOR but I can't find it. It's not listed in Control Panel - Programs and Features. None of the explanations I've read work. It's still on my computer somewhere because at odd times,...
1
vote
1
answer
131
views
Can we make a non-tor .onion website?
.onion URLs that I've seen do not open normal web browsing.
My question is can I open a typical website (like a .com or .net) and buy a .onion URL for it which can be opened through normal web ...
- 113
0
votes
1
answer
315
views
How to implement a hidden service with bridges?
If my ISP blocks access to tor nodes, I would get bridge info from official tor website and connect tor again but how can I make my hidden service to use bridges ? Does hidden service even need ...
0
votes
1
answer
313
views
How to ssh with onion address on window 10?
I made a secure drop server.
For better security, I've set up onion service for ssh.
How to ssh with onion address in Windows 10?
torify ssh [email protected]
doesn't exist in window 10.
0
votes
1
answer
264
views
Traffic monitoring of specific hidden services
I offer onion hosting to the general public and I am having some issues with many hidden services when they share an instance of Tor with a very busy service. When there is a very busy hidden service ...
- 1
0
votes
1
answer
263
views
Tor can't read HiddenServicePort unix socket through group permissions when starting as root and using setgid?
Permissions are set so tor should be able to access through the postfix-test-queue user:
$ sudo ls -l /var/spool/postfix-test/public/smtpd
srw-rw-rw- 1 postfix-test postfix-test 0 █████ /var/spool/...
1
vote
0
answers
163
views
How to remove an onion service from the DHT?
Btw, I am a newbie so I am sorry if this is a dumbest question, but here I come!
So, I am trying to learn about tor's onion services from their website on this page and how it's actually done on this ...
- 111
2
votes
0
answers
584
views
Can't use unix socket in torrc with nginx (Onion Service)
Im using Ubuntu 22.04 and everytime I try to use a unix socket in torrc config file the onion service doesn't work
torrc config file:
Log notice file /var/log/tor/log
RunAsDaemon 1
SocksPort 0
...
- 21
0
votes
1
answer
782
views
Make mirror of .onion in clearnet
I have a domain and website in .onion now I want to make site's mirror in clearnet. How should I do that?
- 1
0
votes
1
answer
1k
views
How to connect to onion service via PuTTY
I have set up an onion service on a machine (running Ubuntu Server 22.04) that provides both web and SSH access, such that this is the torrc:
HiddenServiceDir /var/lib/tor/myservice/
HiddenServicePort ...
- 11
1
vote
3
answers
1k
views
Can't acces onion sites with some links
So, im kind of new on this, I'm using Tor with Tails. I cannot acces to onion sites using links such as:
[facebookcorewwwi.onion] (Unable to connect Firefox can’t establish a connection to the server ...
- 11
1
vote
0
answers
508
views
Tor Hidden Service v3 'INTRO-AUTH' Client Authentication
In the Tor hidden service v3 protocol spec https://github.com/FiloSottile/torspec/blob/master/rend-spec-v3.txt there are 2 types of client authentication described, HS-DESC-ENC which uses an x25519 ...
- 111
1
vote
2
answers
226
views
Sending data to hidden service without browser
So I have currently setup a hidden service to give me an onion address and the port it runs off is port 80 or 443. For some cybersecurity research I'm doing, I was initially going to setup an exit ...
- 113
1
vote
2
answers
580
views
Hide/disable clearnet website and make only available through onion link
it seems like an easy question but I cannot find good information. I have built a PHP website that is of course available in the clearnet through the IP and I have a hidden service running (so it is ...
- 11
0
votes
2
answers
790
views
Not able to ssh over tor
I did setup and V3 hidden service for ssh but I'm not able to connect to the server through tor. When I run torify ssh [email protected] get the following error:
1639811611 ERROR ...
- 101
1
vote
1
answer
118
views
would this break onion security? serving clearnet resources from an onion site to force visitors to go through exit nodes
i read in another post "Onion services do not use exits and are end-to-end encrypted. They don't need HTTPS for its encryption and its impossible for connections to be man-in-the-middled."
I ...
- 111
2
votes
1
answer
110
views
How does Tor connect to a server while hiding it's ip?
This may be a naive question. When I type in a .onion address I assume that the Tor network is designed to not know the ip of the server, or else law enforcement could easily subpoena Tor saying "...
- 21
0
votes
1
answer
347
views
How do I create a TOR site for an already running HTTP server?
I have an HTTPS server made in JavaScript running on port 443 directly (not the best idea, but whatever).
I would like to add an onion domain to this, how should I go about getting the data from the ...
- 105