Прорыв сквозь фашистский фаервол: Туннелинг-инкапсуляция в корпоративных средах с ISA

Предисловие. Данная статья не несет каких-либо новых концепций, но является оригинальной. Ввиду этого прошу не разводить флуд, что это уже все было у бабушки во сне, етс. Так же не статья не является руководством по использованию перечисленного программного обеспечения, а рассматривает частную...

Unfixed XSS vulnerability at tor-proxy.net

Security researcher dohedo, has submitted on 09/06/2010 a cross-site-scripting XSS vulnerability affecting tor-proxy.net, which at the time of submission ranked 329775 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently...

EFF and Tor Launch HTTPS Everywhere Firefox Extension

Two prominent privacy-rights organizations, the Tor Project and the Electronic Frontier Foundation, have launched a new Firefox extension that encrypts all of the browser’s communications with some prominent Web sites. The extension, called HTTPS Everywhere, is designed to create secure HTTPS...

Anonymity, Privacy and Circumvention with Tor

Jake Appelbaum discusses the ways in which the Tor network can be used to help with online privacy and anonymization in this video from the SOURCE Conference in Boston...

Tor Clients Information Disclosure Vulnerability (win)

This host is installed with Tor and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodtorclientsinfodiscvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Tor Clients Information Disclosure Vulnerability win Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Tor Clients Information Disclosure Vulnerability - Linux

Tor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor Clients Information Disclosure Vulnerability (Linux)

This host is installed with Tor and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodtorclientsinfodiscvulnlin.nasl 5401 2017-02-23 09:46:07Z teissa $ Tor Clients Information Disclosure Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

Tor Directory Queries Information Disclosure Vulnerability (win)

This host is installed with Tor and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodtordirqueriesinfodiscvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Tor Directory Queries Information Disclosure Vulnerability win Authors: Antu Sanadi Copyright: Copyright...

Tor < 0.2.1.22, 0.2.2.x < 0.2.2.7-alpha Directory Queries Information Disclosure Vulnerability - Windows

Tor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor Directory Queries Information Disclosure Vulnerability (Linux)

This host is installed with Tor and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodtordirqueriesinfodiscvulnlin.nasl 5401 2017-02-23 09:46:07Z teissa $ Tor Directory Queries Information Disclosure Vulnerability Linux Authors: Antu Sanadi Copyright: Copyrig...

Tor Directory Queries Information Disclosure Vulnerability - Linux

Tor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor 0.2.2.x < 0.2.2.7-alpha Clients Information Disclosure Vulnerability - Windows

Tor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor日志文件信息泄露漏洞

CVE ID: CVE-2010-0384 Tor（The Onion Router）是第二代洋葱路由的一种实现，用户通过Tor可以在因特网上进行匿名交流。 如果将Tor用作了目录镜像，在检测到错误的客户端行为的时候就可能在日志中记录客户端的IP地址。本地用户通过读取日志文件就可以发现客户端的身份。 Tor 0.2.2.x 厂商补丁： Tor --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://www.torproject.org/easy-download...

CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...

CVE-2010-0384

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...

DEBIAN-CVE-2010-0383

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations...

CVE-2010-0383

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations...

CVE-2010-0383

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations...

CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...

CVE-2010-0384

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...