18

It doesn't resolve them in the common sense - there is no DNS involved at all. It looks up their introduction point on the hidden service directories - see Is it possible to look up the public key for a .onion-address?. Then a rendezvous point is set up where the hidden service and the client meet - answers to How do onion addresses exactly work? have more ...


16

No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used at all with hidden services, because the connection stays inside the Tor network until the hidden service is reached.


14

What's going on? You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called Ransomware (Wikipedia). What do you mean by encrypted all my files?! When you caught the ransomware, it took your files one by one and encrypted it with a key. When all your files were encrypted, it probably created a small ...


13

You can extract the list from Hidden Service lists and search engines which are available at OnionDir - Deep Web Link Directory. Or you can try Ahmia.fi site which is gathering .onion addresses using various methods by crawling the hidden services, downloading visited page data from the Tor2web nodes, and users can use an HTML form to add new addresses. ...


12

There are few available Tor2web network gateways: *.tor2web.org, *.tor2web.fi (managed by Ahmia - Onion Search Engine), *.tor2web.blutmagie.de (managed by O.Selke with no block), *.onion.sh (managed by my unknown friend: “hey anon!”). Source: Tor2web: exposing the darknet on Internet (PDF) How it works Whenever you see a URL like http://xxx.onion/, that'...


11

Instructions: Download an existing 'opensearch' XML file for one of the DuckDuckGo provider add-ons, such as the 'Lite' version (or the 'html' version which is also non-JS by default): https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-lite/ or https:// addons.mozilla.org/en-us/firefox/addon/duckduckgo-html/. Do it by right-clicking on the 'Download ...


11

You should use --socks5-hostname instead of just --socks5. This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't.


10

There are many onion sites that are basically lists of onion sites. But many of those are not maintained or not well. Here are some links to find more links: http://skunksworkedp2cg.onion/sites.html Harry71 - An auto-generated up to date list of sites. Search inside that page for 'links' and 'directory'. http://msydqstlz2kzerdg.onion/search/ ahmia.fi - a ...


9

I discussed your question in the #tor IRC channel. phobos and velope helped with this answer. When I fiddled around with your question I tried to create a large number of hidden services (HS). It was quite easy to create 100 HS, but when I started Tor, the process run for some minutes on 100% CPU utilization. There was no impact on the memory. I looked it ...


9

Some people like http://onion.direct . However I am a fan of onion.link. I do know at least in terms of size of GOOG index, the results come out to: onion.direct | 21k onion.cab | 232k onion.link | 1060k Both onion.link as well as onion.cab do caching. AFAIK the other various t2w gateways do not.


8

TL;DR — Yes, traffic is end-to-end encrypted between the client and the server node. To understand why, it's important first to clear up a misconception in the original question: when Alice don't know destination node's key how is that possible encrypt traffic on this point? Alice does know the destination's public key (identity) and visa versa. Keys ...


8

In regard to the server requirements, there are a few important differences between a hidden FTP service and a regular FTP service. Also, you should check your ftp server software to make sure it doesn't leak your IP address. Force the client to use passive mode, not active/port mode. In passive mode the client initiates both the control and the data ...


8

Yes they can! For example, try http://whatever.bitmailendavkbec.onion which is the Bitmessage onion service with an arbitrary subdomain. Not that the subdomain is not transmitted between the Tor client and the onion server. It's the browser that sends the full host (including the subdomain) to the webserver in the request's Host header, so protocols othe ...


8

You will almost certainly have to use a 1024 key. As of the current version to date, it doesn't seem as if 2048 or higher keys are supported. And is it possible? (although I am sure it is, because I noticed there were debates about implementing 2048-bit RSA support at 2011 year, probably since much time have passed this feature is already there) ...


8

Torify is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file. It'll take measures to ensure that an application, which has not been designed for use with Tor (such as TorChat), will use only Tor for internet connectivity. Also ensure that there are ...


7

I also saw this project called scallion, which is GPU based hashing, unlike shallot, it is a lot faster. One disadvantage of this: it is coded for windows. Anyway, for shallot, I entered php as the phrase, and it went with a fancy name... -------------------------------------------------------------- Found matching domain after 3874 tries: saticzeff4ygphpr....


7

First of all the Tor network itself doesn't support any coding languages it just moves data back and forth. The performance on Tor and especially on hidden services is not the best, therefore hidden service operators may use low resolution images/graphics as they are easier to distribute over Tor. I'm not sure what websites make use of .onion domains and ...


7

No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549 The nodes running HS directories do form a distributed hash table, though it's not decentralized the same way that Freenet is, since all of the HS directory nodes are listed in the Tor consensus. So the client identifies which HSDir node is ...


6

Interesting discussion points thus far. Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. These VMs need to be online, replicating, and failing over with zero issues and for use by any person who is involved in the enterprise. Your VMs are on ...


6

Based on the case reports they were able to trace the SR to him. That does not mean that he was initially found out because of a tor compromise. If such a compromise existed, they would have had to create a parallel construction to hide the fact the compromise existed, which would had been trival once they found their target. Yes, he may have gotten sloppy, ...


6

The creation of the hostname is described in rend-spec, the Tor Rendezvous Specification. You are 100% correct: There is no central domain name provider on the Tor network. There is no central anything provider on the Tor network. How it works: Tor generates two keys for every service on the Tor network. Tor generates a private "secret" key, and a ...


6

Yes it can be scanned. People can scan for services as they do on clearnet, by routing their scanner through tor pointing it at the domain. A onion domain is not to be considered a secret. Im not sure about your vpn question, but you can look at this answer here for some hints on how to make the domain private: https://tor.stackexchange.com/a/3762/112


6

Also to mention onion.cab which is 5 times faster than browsing via the tor-client, because of its static-files-caching.


6

Moreover, you should use torsocks - built-in utility for working with Tor Network. It is designed to prevent any leakage! Please, read the man page. For example: root@localhost:/# torsocks curl XXXXXXXXXXXXXXX.onion Otherwise, if you are trying to resolve .onion name to IPv6, you are able to use tor-resolve utility, it is built-in too: Syntax: root@...


6

I'm sorry to hear that! It sounds like you have been infected with ransomware named "Cryptowall". This is a type of malware that encrypts your files and deletes the originals, and then blackmails you into paying the malware authors for the decryption key. The authors are in Russia or somewhere similar, so they want you to pay them with Bitcoin. Cryptowall ...


6

No, .onion's are not exempt from DNS leaks. Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS itself is agnostic to the gTLD being valid or not, with a few exceptions (for example .invalid should always fail). There is an RFC covering .onion which ...


5

As far as I know, 'relaying for hidden services' is not optional. If you're a relay, you can be used to access hidden services. However, being part of a circuit from a client to a HS is no different than being part of a circuit from a client to an exit and subsequently to the clear net. (If anything, there is less risk, since you're not necessarily ...


Only top voted, non community-wiki answers of a minimum length are eligible