Now a little bit about attacks on the tor network 💜

I want to give you an example of how to de-anonymize hidden services on the tor network

We will need:

Node management in a tor injection point scheme
A node that is a watchdog node.

To analyze if these actions are performed:

Register all incoming and outgoing cells for each circuit.

Get the lifetime of each circuit. The average lifetime of a circuit is 10 minutes. Injection point circuits are active for 18 to 24 hours. Thus, circuits with lifetimes much longer than 10 minutes are viable candidates.
For all of these circuits, calculate the position imprint, based on the registered cells, and identify the protective nodes.
Evaluate the direction of cells received and sent after the establishment of each of these circuits is complete. Viable candidates are circuits in which cells are sent only to the hidden server.

In addition, analyzing the IP address to which our node is directly connected may provide an additional clue. 

If that IP address is a publicly known Tor IP address, it will be the IP address of the Tor relay, not the hidden server. In this case, our node is probably not connected to the hidden server.
After that, we need to find the associated onion address of the hidden service. This hidden service is provided by the hidden server to which the security node in the introduction point chain is directly connected.
Configure the Tor client.

Launch a correlation attack by sending a pattern based on the traffic. Use whatever onion address you want to investigate.
On the watchdog node, look at all cells belonging to the selected circuits. Analyze these circuits for the sent traffic pattern.

By recognizing the traffic pattern, we can figure out that our node is the first node in the hidden server injection point chain associated with the selected onion address. Hence, the corresponding onion address of the hidden server's IP address can be determined. В

As a result, the hidden service has been de-anonymized.That's all . About more detailed attacks there are articles in the archive below 🧩

I also want to show you :
Fun tools to work with tor 🔧

link - This package is designed to help hunt for Onion addresses according to a set of keywords set by the user.
Here's another link -It's used to forensically analyze the server containing the active website on the Tor network.

I think that's about it .Thanks for reading ❤️
I apologize for the confusion. More details you can read in the archive below - + there is a little bit about forensics at the level of the iron itself .
Important announcement: admin wants to take a vacation from channel number to 6/7 to avoid burnout 😶🌫

And remember Mary Ann isn't the one with the small stature, she's the one serving the white rabbit🎀🐇
#network #tor #attacks