16 votes

Do all .onion addresses use SSL/TLS?

No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used ...
user avatar
  • 2,209
14 votes

I got infected by ransomware, and it tells me to download Tor. What's going on?

What's going on? You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called Ransomware (Wikipedia). What do you mean by encrypted all my files?...
user avatar
  • 460
13 votes
Accepted

Where I can find, export or download the biggest list of all .onion addresses?

You can extract the list from Hidden Service lists and search engines which are available at OnionDir - Deep Web Link Directory. Or you can try Ahmia.fi site which is gathering .onion addresses using ...
user avatar
  • 1,115
12 votes
Accepted

What are the best Tor2Web anonymous gateways?

There are few available Tor2web network gateways: *.tor2web.org, *.tor2web.fi (managed by Ahmia - Onion Search Engine), *.tor2web.blutmagie.de (managed by O.Selke with no block), *.onion.sh (managed ...
user avatar
  • 1,115
11 votes

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

Instructions: Download an existing 'opensearch' XML file for one of the DuckDuckGo provider add-ons, such as the 'Lite' version (or the 'html' version which is also non-JS by default): https://addons....
user avatar
11 votes
Accepted

resolve .onion address from bash

You should use --socks5-hostname instead of just --socks5. This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't.
user avatar
  • 3,745
10 votes

How do I find onion sites?

There are many onion sites that are basically lists of onion sites. But many of those are not maintained or not well. Here are some links to find more links: http://skunksworkedp2cg.onion/sites.html ...
user avatar
  • 3,745
9 votes

What are the best Tor2Web anonymous gateways?

Some people like http://onion.direct . However I am a fan of onion.link. I do know at least in terms of size of GOOG index, the results come out to: onion.direct | 21k onion.cab | 232k onion....
user avatar
  • 195
8 votes

Can onion sites have subdomains?

Yes they can! For example, try http://whatever.bitmailendavkbec.onion which is the Bitmessage onion service with an arbitrary subdomain. Not that the subdomain is not transmitted between the Tor ...
user avatar
  • 81
8 votes
Accepted

Hidden .onion service with 2048 bit (or 4096 bit) RSA private key -- how to host it?

You will almost certainly have to use a 1024 key. As of the current version to date, it doesn't seem as if 2048 or higher keys are supported. And is it possible? (although I am sure it is, because ...
user avatar
8 votes
Accepted

How to anonymize the programs from the terminal?

Torify is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file. It'll take measures to ...
user avatar
  • 1,115
7 votes

How do Hidden Services get .onion domains that aren't random?

I also saw this project called scallion, which is GPU based hashing, unlike shallot, it is a lot faster. One disadvantage of this: it is coded for windows. Anyway, for shallot, I entered php as the ...
user avatar
7 votes
Accepted

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549 The nodes running HS directories do form a distributed hash table, though it's not ...
user avatar
6 votes

Securely hosting a Tor hidden service/site

Interesting discussion points thus far. Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. ...
user avatar
  • 61
6 votes

Can People Scan a .onion Address For Hidden Services?

Yes it can be scanned. People can scan for services as they do on clearnet, by routing their scanner through tor pointing it at the domain. A onion domain is not to be considered a secret. Im not ...
user avatar
  • 1,863
6 votes

What are the best Tor2Web anonymous gateways?

Also to mention onion.cab which is 5 times faster than browsing via the tor-client, because of its static-files-caching.
user avatar
  • 216
6 votes

resolve .onion address from bash

Moreover, you should use torsocks - built-in utility for working with Tor Network. It is designed to prevent any leakage! Please, read the man page. For example: root@localhost:/# torsocks curl ...
user avatar
  • 61
6 votes

I got infected by ransomware, and it tells me to download Tor. What's going on?

I'm sorry to hear that! It sounds like you have been infected with ransomware named "Cryptowall". This is a type of malware that encrypts your files and deletes the originals, and then blackmails you ...
user avatar
6 votes
Accepted

Are .onion addresses leak-proof?

No, .onion's are not exempt from DNS leaks. Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS ...
user avatar
  • 10.8k
5 votes

Searching for Tor hidden servicces

These are search engines that index .onion sites: Torch not Evil Candle ahmia.fi
user avatar
  • 3,745
5 votes

Developing a Tor library

Tor is a socks5 proxy. here is the socks5 rfc here is a guide to how socks5 works with tor read this, it is VERY useful if using sockets (I assume c++ uses sockets) you will need to connect to ...
user avatar
  • 500
5 votes
Accepted

Visiting websites also run as hidden service

It must be done manually. There is no interaction between the Domain Name System (DNS) and Tor hidden service hostnames. See this answer about resolution of .onion domains.
user avatar
  • 2,989
5 votes
Accepted

1000s of hidden services

There are known scaling problems with running more than a few dozen hidden services in a single Tor process. I think the 100% CPU load comes either from constantly generating and signing new hidden ...
user avatar
5 votes

Retrieving hidden service descriptors

Tor now has a HSFETCH control port command which allows Tor hidden service descriptors to be retrieved from the hidden service directories. I've uploaded a simple Python script which uses the Stem ...
user avatar
  • 121
5 votes

Where I can find, export or download the biggest list of all .onion addresses?

Harry71 has a list of onion-hosts which provide a public web site, which you can get in machine readable format. http://skunksworkedp2cg.onion/sites.txt It gets updated fairly often.
user avatar
5 votes
Accepted

Why do some websites have both onion address and non onion address?

Because they want give privacy aware users a choice. If a user connects to the onion domain then the whole communication is end-to-end encrypted. This means that users who wants can connect and use ...
user avatar
  • 1,863
5 votes
Accepted

What encryption algorithms does Tor use?

What encryption algorithms does Tor use? See the following sections of the Tor Protocol Specification: 0.2 Security parameters 0.3 Ciphers Isn't RSA 1024 considered weak? 1024 hasn't been broken ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible