Skip to main content
Share Your Experience: Take the 2024 Developer Survey
7 votes

Looking to create a onion domain; need some help

How-to: Quoting hiddenwiki: Getting a .onion domain is not only free (they are automatically generated by Tor), but it is simple once you have completed the basic server installation procedure. If ...
NeverMine17's user avatar
6 votes

Understanding the tor circuit

You build a TLS connection to your guard. Over that TLS connection you perform a key exchange using the OR protocol. Now you and the first guard compute two keys from the shared secret the key ...
cacahuatl's user avatar
  • 11k
6 votes

Why doesn't torproject.org have an official onion address?

Actually, there is an onion address for Tor: http://expyuzz4wqqyqhjn.onion/ The Tor Project runs quite a few onion addresses: https://onion.torproject.org/ I can't confirm if the Tor Browser uses ...
SuperSluether's user avatar
5 votes

Is it possible to access a dark web server by a public IP instead of an .onion address?

The difference between .onion URLs and normal URLs, is that the normal URL is simply a "human readable pointer" points to a network location... on the other hand, a .onion URL is actually the only ...
Quill's user avatar
  • 191
5 votes

sending email through .onion

It depends, there are a few scenarios. Internal mail, from: [email protected] to: [email protected] or from: [email protected] to: [email protected] The email never leaves the foo.com server(s), there's no way to ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

Is it possible to ping .onion?

ping, assuming you're talking about the *nix command, is ICMP. Tor is exclusively TCP in the requests carried across the network. You cannot "ping" an onion. If you want to know if an onion is online,...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

Is it possible to access a dark web server by a public IP instead of an .onion address?

No, correctly-configured Tor hidden services are not accessible by direct IP connection. When setting up a hidden service, you set up your web server to only listen to traffic from the local machine, ...
Ben N's user avatar
  • 429
4 votes
Accepted

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly. You need to generate long term identity keys for all 6 ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

How does Tor use application proxy (SOCKS)?

The "Onion Proxy" is a name for a Tor client, it is the entire client process. The SOCKS interface is just a way for a client to utilise the onion proxy. The SOCKS server is provided by the Tor ...
cacahuatl's user avatar
  • 11k
3 votes

Do sessions still work for onion websites?

Yes, sessions still work, and no, users won't be logged in all the same. Website sessions are stored client-side, so every client will have a unique session.
SuperSluether's user avatar
3 votes

Is it possible to access a dark web server by a public IP instead of an .onion address?

The concern you're rising here is "will it be able to detect a clearnet address of a darknet server" - so it's must be protected by firewall. And the most effective technique here is to separate the ...
Alexey Vesnin's user avatar
  • 6,225
3 votes

What would happen when multiple servers are having the same onion hostname?

It depends on the exponent, if the people will use the same exponent - yes, they will have an identical keys. And - as far as I know - as soon you publish your HS descriptor, no descriptor with the ...
Alexey Vesnin's user avatar
  • 6,225
3 votes
Accepted

Designing P2P application over Tor

"the IP for other users to connect to?" Onion services don't use IPs. You should use SOCKS5's remote hostname functionality, this hands over the hostname to Tor and will ensure you do not ...
cacahuatl's user avatar
  • 11k
3 votes

How to have assigned previous onion address for my hidden service?

Basing on official docs you should copy-paste content of old HiddenServiceDir to your new HiddenServiceDir location (you should overwrite new ones). There are only two files: hostname and private_key....
Michal_Szulc's user avatar
3 votes

Restarting a tor relay. Does it go back to phase one?

No. Your relay will lose some of its flags if it's offline for a period of time, but simply restarting doesn't seem to affect its consensus status. I'm not sure if the consensus deteriorates if your ...
SuperSluether's user avatar
3 votes

How can i nginx reverse proxy to .onion site ? which is on TOR network?

You need a polipo proxy - because Tor is not a http proxy, it's a Socks one. You can get it on polipo's official website and don't be upset that it's no longer maintained: this is the case when "the ...
Alexey Vesnin's user avatar
  • 6,225
3 votes
Accepted

What is passed to the Onion Proxy in terms of the OSI model?

The SOCKS proxy operates on the application layer. Therefore the answers to your questions are: The SOCKS proxy receives whatever you send to it via the TCP connection that is built up to the SOCKS ...
segfault's user avatar
3 votes
Accepted

Finding all onion addresses

Tor directory authorities don't keep onion addresses. It is Hidden Service Directory which keeps descriptors for currently running onion services. As they are responsible for holding descriptors, ...
defalt's user avatar
  • 205
3 votes
Accepted

Do Tor relays require knowledge of the real IP address of a hidden service, to enable routing to it?

defalt answered your question in a nutshell. The solution Tor uses to hide your IP address, and nevertheless allows you to host a hidden service, is that it is the host of the hidden service that ...
entrop-x's user avatar
  • 146
2 votes

Is it possible to find a Tor page based on the 512-bit hash?

I placed 36367763ab73783c7af284446c59466b4cd653239a311cb7116d4618dee09a8425893dc7500b464fdaf1672d7bef5e891c6e2274568926a49fb4f45132c2a8b4 into DDG and came across md5hashing.net. Which when I ...
user13596's user avatar
2 votes

What's the difference between the Tor proxy and the Browser Bundle?

Tor Browser is a patched version of Firefox that is maintained and distributed by the Tor Project, it includes a copy of Tor which is launches itself when its started. Tor Browser should be prefered ...
cacahuatl's user avatar
  • 11k
2 votes

Implementing the tor protocol, based on tor sources and a few clarifications

Step 7 is a TLS socket, not just raw TCP. "I created the onion hidden service, and i want to try make a http request to it", there are additional steps required for onion services which you'll know ...
cacahuatl's user avatar
  • 11k
2 votes

Malicious hidden service directories

Quick synopsis This is oldish research that was presented about a year ago by Filippo Valsorda and George Tankersley at HITB. Sophos are an anti-virus company. They have a product to sell and the ...
cacahuatl's user avatar
  • 11k
2 votes

Using .onions to forward to public .com

Technically, NO - in the abstract common case. In 80%+ cases setting up a Nginx reverse proxy will do the trick, but sites can be complicated, and they can use a wide set of subdomains and/or other ...
Alexey Vesnin's user avatar
  • 6,225
2 votes
Accepted

When using Tor, will different tabs follow different pathways?

In Tor Browser, isolation is performed by the first party domain. So, if tab A is for bob.com as the domain and tab B is for dave.com, they will use distinct circuits. However, if tab A and tab B are ...
cacahuatl's user avatar
  • 11k
2 votes

How often does a Tor change rendezvous point with hidden service?

Do you change rendezvous points and repeat this whole process every time you switch to a different page, even on the same hidden service? No, the rendezvous point is used to establish a circuit, over ...
cacahuatl's user avatar
  • 11k
2 votes
Accepted

Pre Tor software for MacOS (not OSX)

It's called JAP/Java Anonymizing Proxy otherwise known as JonDoNym. In 2003 the network operators were compelled by the German Federal Bureau of Criminal Investigation to log mixes within the network ...
Alexey Vesnin's user avatar
  • 6,225

Only top scored, non community-wiki answers of a minimum length are eligible