3031 matches found
OnionHarvester - A small TOR Onion Address harvester for checking if the address is available or not
A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is published in this blog at:...
Fedora 27 : tor (2017-bc2edc421d)
update to upstream release 0.3.1.9. Fixes various CVEs : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a...
Fedora 27 : tor (2017-b2c714515b)
update to upstream release 0.3.1.7 ---- update to upstream release 0.2.9.12 SECURITY 1494860 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Real World Crypto 2018 (RWC 2018) brain dump
The 2018 edition of Real World Crypto RWC was in Zurich you can find the conference full program here.. I live in Switzerland so I was extremely happy about it. RWC is basically the best conference I ever attended and it will probably be so for a while. I almost risked to skip it due to flu but I...
Instagram-Py - Simple Instagram Brute Force Script
Instagram-Py is a simple python script to perform basic brute force attack against Instagram , this script can bypass login limiting on wrong passwords , so basically it can test infinite number of passwords. Instagram-Py is proved and can test over 6M passwords on a single instagram account with...
WhatWaf - Detect And Bypass Web Application Firewalls And Protection Systems
WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass or two for said firewall, on the specified target. Features Ability to run on a single URL with the...
Fedora Update for tor FEDORA-2017-bce9e03721
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tor FEDORA-2017-bc2edc421d
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : tor (2017-bce9e03721)
update to upstream release 0.3.1.9. Fixes : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a circuit path -...
[SECURITY] Fedora 26 Update: tor-0.3.1.9-1.fc26
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...
[SECURITY] Fedora 27 Update: tor-0.3.1.9-1.fc27
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...
[ASA-201712-10] tor: multiple issues
Arch Linux Security Advisory ASA-201712-10 ========================================== Severity: High Date : 2017-12-16 CVE-ID : CVE-2017-8819 CVE-2017-8820 CVE-2017-8822 CVE-2017-8823 Package : tor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-539 Summary ======= T...
FreeBSD : tor -- Use-after-free in onion service v2 (36ef8753-d86f-11e7-ad28-0025908740c2)
The Torproject.org reports : - TROVE-2017-009: Replay-cache ineffective for v2 onion services - TROVE-2017-010: Remote DoS attack against directory authorities - TROVE-2017-011: An attacker can make Tor ask for a password - TROVE-2017-012: Relays can pick themselves in a circuit path -...
openSUSE Security Update : tor (openSUSE-2017-1336)
This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks bsc1070849 : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a...
Needl - Take Back Your Privacy. Lose Yourself In The Haystack.
Take back your privacy. Lose yourself in the haystack. Your ISP is most likely tracking your browsing habits and selling them to marketing agencies albeit anonymised. Or worse, making your browsing history available to law enforcement at the hint of a Subpoena. Needl will generate random Internet...
Updated tor packages fix security vulnerability
When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...
MGASA-2017-0444 Updated tor packages fix security vulnerability
When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...
Tor Denial of Service Vulnerability (CNVD-2018-00232)
Tor is free software that enables anonymous communication. A denial of service vulnerability exists in Tor before 0.2.8.12. An attacker can exploit this vulnerability to cause a denial of service client crash via specially crafted hidden service descriptors...
Security fix for the ALT Linux 8 package tor version 0.3.1.9-alt1.M80P.1
0.3.1.9-alt1.M80P.1 built Dec. 6, 2017 Vladimir Didenko in task 195838 Dec. 1, 2017 Vladimir Didenko - new version Fixes: CVE-2017-8819, CVE-2017-8820, CVE-2017-8821, CVE-2017-8822, CVE-2017-8823...
