[candyman1983]

I am hosting an onion site at the moment and was wondering if any of the hackers here have any insight in just how easy/hard it is to find the actual real ip of the host?

is this the place where maybe i could offer a $ amount if someone can find the real IP?

[sebastian2009]

Sorry but is impossible, this is the principe of tor

[decauye]

Sometimes default http servers (apache, ...) are sharing the onion link in the response headers when it's misconfigured. You can use shodan to find thoses.

You could also try to scan the whole internet to find machine with tor related services. Or scan the ips connecting to Tor by running a lots of nodes by yourself.

If the website have a clearnet version (like breachforums) there is some other secret ways of doing it, and it's way easier.

[candyman1983]

Sometimes default http servers (apache, ...) are sharing the onion link in the response headers when it's misconfigured. You can use shodan to find thoses.

You could also try to scan the whole internet to find machine with tor related services. Or scan the ips connecting to Tor by running a lots of nodes by yourself.

If the website have a clearnet version (like breachforums) there is some other secret ways of doing it, and it's way easier.

no clearnet version, but there are TOR proxy sites that you can view the site on the normal web, but no, it has no domain linked to it


would the apache server share anything other than the onion link?

[decauye]

Sometimes default http servers (apache, ...) are sharing the onion link in the response headers when it's misconfigured. You can use shodan to find thoses.

You could also try to scan the whole internet to find machine with tor related services. Or scan the ips connecting to Tor by running a lots of nodes by yourself.

If the website have a clearnet version (like breachforums) there is some other secret ways of doing it, and it's way easier.

no clearnet version, but there are TOR proxy sites that you can view the site on the normal web, but no, it has no domain linked to it


would the apache server share anything other than the onion link?

The Apache server could share the onion page if misconfigured and called correctly.

Check this https://owasp.org/www-project-web-securi..._Injection

And if you understand check dis
https://github.com/tbiehn/CURRYFINGER

[DredgenSun]

I think you'll have a hard time getting hacked on a Tor platform

[candyman1983]

Sometimes default http servers (apache, ...) are sharing the onion link in the response headers when it's misconfigured. You can use shodan to find thoses.

You could also try to scan the whole internet to find machine with tor related services. Or scan the ips connecting to Tor by running a lots of nodes by yourself.

If the website have a clearnet version (like breachforums) there is some other secret ways of doing it, and it's way easier.

no clearnet version, but there are TOR proxy sites that you can view the site on the normal web, but no, it has no domain linked to it


would the apache server share anything other than the onion link?

The Apache server could share the onion page if misconfigured and called correctly.

Check this https://owasp.org/www-project-web-securi..._Injection

And if you understand check dis
https://github.com/tbiehn/CURRYFINGER

thanks

I think you'll have a hard time getting hacked on a Tor platform

in a way not hacked. Just want to know if the Main IP can be found.

[decauye]

If you want to be fully secure apache shouldn't respond to any exposed port. You have the real ip address you can just try to connect a socket to port 80 (and 443) (and your port tor if any) and if you got no response from any port you're good to go.

For more related informations check ufw and network segmentation.

[joepa]

should not be possible right? only with weaknesses in the protocol or tor software

[420]

It's very possible but very hard. I can admit that the shop I own with some people was leaking the backend from onion because we were using the "Onion-Location" header and it got indexed on of those search engines.