PHThis is a practical baby guide bakit anonymous ang Tor, simplified at the lowest level. Also rebuttal for Tutorial - Scanner and Exploiter, Shutdown Any Websites Easily (super ez)(governments, edu and more) Tutorial+Code
The answer is:
Entire Summary:
There are tons of other factors rin na pwede kang ma traceback, pero impossible kasi most of them naman are just common mistakes (e.g. WebRTC Leak, Regular Sudden No Internet). If he mean me, i know the governments or agencies already know me and probably sa watchlist na haha.
Terms
NO DATA IS LOGGED SA ENTRY NODE MASLALO NA EXIT NODE (secured nodes). PERO IF YOU HAVE TWEAKED TOR SETTINGS AND ACCIDENTLY USED MALICIOUS OR UNVERIFIED NODES PWEDE NILA MA LOG YUNG ENCRYPTED DATA. THESE ATTACKS ARE COMPLICATED THOUGH (e.g. Sybil Attack, Timing Attack).
Example: If you visit example.com, mapunta siya sa entry node then middle nodes (nodes kasi there are about 5 of them, randomly out of thousands) then exit node.
(Actually, Entry Node and Exit node is also randomized)
Then gi code ko ito sa python to leverage TOR to make a request to my server and show the TOR IP for analyzation.
Now ready na ang TOR at client to simulate requesting to the server. Kulang nalang sa setup is yung server, so bumili ako ng secure server at nag sniff ng mga requests or traffics.
And yes sa root ko gi run para mas broad ang privilege, it's not really dangerous if you uninstall it or not use it afterwards. Now finally gi run ko yung code at ito ang lumabas.
Now tignan natin yung information ng TOR IP in detailed using IP-API (iba yung IP because it changed during the execution pero same root naman).
Wow connected nga sa TOR, pero we are not satisfied yet. Let's keep digging about sa information ng yung request or packet. Baka may mahanap tayo na sensitive information or at least clues, the thing is packets contains metadata (it's like overview information) at yung content ng request mo. So ginawa ko siya ulit but this time using tcpdump kasi for some reason hindi ko magamit yung tshark to write sa server dahil wala daw privilege and I'm lazy to fix. UwU
After that na save yung mga requests at packets sa packets.pcap, gagamitin ko You do not have permission to view the full content of this post. Log in or register now. to analyze the network better kasi makatamad ang wireshark dahil raw masyado yung mga packets (pero it gives you better control than this).
Sheesh walang sensitive information not to mention SSH connections are encrypted rin by default using SSH1 or SSH2. So good-luck but it's not impossible to decrypt it (even so wala parin sensitive data only about yung request), time consuming lang. Now let's move to website.
This is a simple forensic or analyzation, again there are many ways to attack TOR or uncover someone identity sa TOR pero it will not be easy, it will be complicated (or impossible). PERO everything still lies sa gumagamit if he/she makes mistakes.
The answer is:
Entire Summary:
- You will only get traceback if wala kang alam sa TOR.
- You will only get traceback if you always use TOR without changing your servers or using trusted servers.
- You can change your TOR servers everytime you restart it or sa TOR You do not have permission to view the full content of this post. Log in or register now. but usually its automatic.
- You will only get traceback if you leave repetative patterns while using TOR (only feasible if parati mo ginagamit ang TOR).
- With enough resources like NSA, Pentagon and FBI pwede ka ma traceback sa unique pattern mo (e.g. visiting the same websites every time, using TOR sa with same identification always).
- You will only get traceback if your TOR is setup badly.
- Like ginagamit sa häçked na device.
- Please check You do not have permission to view the full content of this post. Log in or register now. i'm too lazy to explain all commands pero it's safe to say you have full control sa TOR client mo.
- TOR primarily works like a VPN rin so don't get overconfident na you're 100% anonymous at mag post ng mga sensitive information mo, mag boast and so forth. Kahit secured ka pero ikaw ay flawed, there is no point.
There are tons of other factors rin na pwede kang ma traceback, pero impossible kasi most of them naman are just common mistakes (e.g. WebRTC Leak, Regular Sudden No Internet). If he mean me, i know the governments or agencies already know me and probably sa watchlist na haha.
Terms
- Node: It's a server, imagine playing a 𝚁𝚘𝚋𝚕𝚘𝚡 game. Everytime you connect or want to join your friend, diba may iba ibang server at sa iba ibang server may different na nangyayari? Ganun din ang node.
- End-to-End/Encryption: Process siya na yung data mo na pwede mabasa maging gibberish (hindi na mabasa) at pwede mabalik to normal using a secret key. All are temporary, meaning kung ano ang code na run yung lang, hindi na ma modify or change and pag End-to-End protocol walang alam yung nag encrypt kung ano yung data.
Tor In Nutshell
TOR stands for The Onion Router, ginawa siya ng US government to protect their surveillance network. Best part? Open source ang TOR meaning makita mo ang code at malaman mo how it works, pwede karin gumawa ng sarili mong TOR if you want.How Tor Works
TOR works like an onion, if you peel meron pang another layer . Meron siyang let's say 3 phases. Entry Node, Middle Node at Exit Node.- Entry node, alam kung sino ka pero hindi alam kung saan ka pupunta.
- By default trusted ang servers and usually handled ng TOR organization itself.
- Middle node, hindi ka alam at hindi alam saan ka pupunta.
- Ito yung mga random servers na host ng mga tao, even if compromised sila hindi nila kaagad agad ma uncover ang identity mo dahil sa encryption.
- Exit node, hindi ka alam pero alam saan mo gusto pumunta.
- By default trusted ang servers and usually handled ng TOR organization itself.
NO DATA IS LOGGED SA ENTRY NODE MASLALO NA EXIT NODE (secured nodes). PERO IF YOU HAVE TWEAKED TOR SETTINGS AND ACCIDENTLY USED MALICIOUS OR UNVERIFIED NODES PWEDE NILA MA LOG YUNG ENCRYPTED DATA. THESE ATTACKS ARE COMPLICATED THOUGH (e.g. Sybil Attack, Timing Attack).
Example: If you visit example.com, mapunta siya sa entry node then middle nodes (nodes kasi there are about 5 of them, randomly out of thousands) then exit node.
- Pag encrypted naman yung data. Paano nila alam saan ako pupunta?
- It's because nag communicate sila ng secret key mo prior to that, yung key mo is used to encrypt your data called end-to-end, chronologically. Temporarily stored lang siya at walang identity, now imagine. TOR is used by millions, do you think it's possible to track someone directly?
- I mean by chronologically, each node has a key. Client request ng key for entry node then sa middle nodes then sa exit node. Meaning encrypted siya from exit node to entry node. Kasi ma decrypt siya first sa entry node up to exit node.
- Paano ko nakukuha ang response?
- Same thing kung paano siya nag send, ireverse mo lang yung process ang since established na yung connection it's respond with ease.
- Pag encrypted naman yung data. Paano nila alam saan ako pupunta?
(Actually, Entry Node and Exit node is also randomized)
Connecting to a Server (VPS) With TOR (bakit siya anonymous)
I used TOR CLI sa You do not have permission to view the full content of this post. Log in or register now. then I executed this command. Ginamit ko yung HTTPTunnelPort para sabihin na iallow ang HTTP/HTTPs connection.Then gi code ko ito sa python to leverage TOR to make a request to my server and show the TOR IP for analyzation.
Now ready na ang TOR at client to simulate requesting to the server. Kulang nalang sa setup is yung server, so bumili ako ng secure server at nag sniff ng mga requests or traffics.
And yes sa root ko gi run para mas broad ang privilege, it's not really dangerous if you uninstall it or not use it afterwards. Now finally gi run ko yung code at ito ang lumabas.
Now tignan natin yung information ng TOR IP in detailed using IP-API (iba yung IP because it changed during the execution pero same root naman).
Wow connected nga sa TOR, pero we are not satisfied yet. Let's keep digging about sa information ng yung request or packet. Baka may mahanap tayo na sensitive information or at least clues, the thing is packets contains metadata (it's like overview information) at yung content ng request mo. So ginawa ko siya ulit but this time using tcpdump kasi for some reason hindi ko magamit yung tshark to write sa server dahil wala daw privilege and I'm lazy to fix. UwU
After that na save yung mga requests at packets sa packets.pcap, gagamitin ko You do not have permission to view the full content of this post. Log in or register now. to analyze the network better kasi makatamad ang wireshark dahil raw masyado yung mga packets (pero it gives you better control than this).
Sheesh walang sensitive information not to mention SSH connections are encrypted rin by default using SSH1 or SSH2. So good-luck but it's not impossible to decrypt it (even so wala parin sensitive data only about yung request), time consuming lang. Now let's move to website.
This is a simple forensic or analyzation, again there are many ways to attack TOR or uncover someone identity sa TOR pero it will not be easy, it will be complicated (or impossible). PERO everything still lies sa gumagamit if he/she makes mistakes.
