Tor: [tor] pre-emptive defenses, potential vulnerabilities

Replacing all tormalloc calls with torcalloc and tormalloczero ============================================================== Zeroing memory upon allocating it will prevent vulnerabilities that consist of transmitting data buffers which are not wholly initialized with the intended data or contain...

Default Apache Configuration Can Unmask Tor Hidden Services

Attention Tor Onion Hosters! A year old loophole in Apache Web Server, uncovered by an unknown Computer Science Student, could potentially unmask the real identity of .onion-domains and servers hidden behind the Tor-network. Although the loophole was reported on Reddit and to the Tor Project mont...

Tor: [tor] control connection pre-auth DoS (infinite loop) with --enable-bufferevents

In control.c, this is the loop that retrieves data from the input buffer of the connection, or returns if no complete linefreed-terminated line is available connectionfetchfrombufline returns 0. c 4225 while 1 4226 sizet lastidx; 4227 int r; 4228 / First, fetch a line. / 4229 do 4230 datalen =...

Tor: libevent (stack) buffer overflow in evutil_parse_sockaddr_port

in evutil.c: c 1798 char buf128; ... ... 1809 cp = strchripasstring, ':'; 1810 if ipasstring == '' 1811 int len; 1812 if !cp = strchripasstring, '' 1813 return -1; 1814 1815 len = int cp-ipasstring + 1 ; 1816 if len intsizeofbuf-1 1817 return -1; 1818 1819 memcpybuf, ipasstring+1, len; Length...

Tor: [tor] libevent dns remote stack overread vulnerability

Hello, the nameparse function in libevent's DNS code is vulnerable to a buffer overread. c 935 static int 936 nameparseu8 packet, int length, int idx, char nameout, int nameoutlen 937 int nameend = -1; 938 int j = idx; 939 int ptrcount = 0; 940 define GET32x do if j + 4 length goto err; memcpy&t3...

Tor: smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacity

Walkthrough of the vulnerability smartlistadd and smartlistinsert both invoke smartlistensurecapacity prior adding an element to the list in order to ensure that sufficient memory is available, to exit if not enough memory is available and to detect requests for an invalid size: c static INLINE...

Anonymous VPN Adapter: OnionCat

OnionCat is a VPN -adapter which allows to connect two or more computers or networks through VPN-tunnels. It is designed to use the anonymization networks Tor or I2P as its transport, hence, it provides location-based anonymity while still creating tunnel end points with private unique IP...

Twitter State-Sponsored Attack Notification

Twitter’s decision to notify users when their accounts are targeted in state-sponsored attacks earned its share of praise. But Twitter’s silence in terms of specifics about the attacks—whether by choice or gagged by a National Security Letter—has foisted some anxiety upon those who were notified....

Facebook adds Built-in Tor Support for its Android App

Rejoice for Privacy Lovers! Facebook today took a surprising move by announcing that it is bringing the free anonymizing software TOR support to its Android app, almost two years after the social network planned to make Facebook available directly over Tor network. Yes. Believe it or not, the...

Kali Linux: Kill Chain

Kill Chain for Kali Linux 2.0 is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependencies: Tor — For the console build in anonymizer. Set — Social-Engineer Toolkit SET,...

Killchain - A Unified Console To Perform The "Kill Chain" Stages Of Attacks

“Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependant tool sets are: 1 Tor -- For the console build in anonymizer. 2 Set -- Social-Engineer Toolkit SET,...

Tor to Launch Bug Bounty Program in 2016

The Tor Project announced last week that it will launch a bug bounty program later this year to encourage security researchers to responsibly report issues they find in the software. Tor Browser and Tor Performance Developer Mike Perry announced the news during the “State of the Onion” address la...

Ransom32 — First JavaScript-powered Ransomware affecting Windows, Mac and Linux

Here's New Year's first Ransomware: Ransom32. A new Ransomware-as-a-service, dubbed Ransom32, has been spotted that for the first time uses a ransomware written in JavaScript to infect Mac, Windows as well as Linux machines. Ransom32 allows its operators to deploy the malware very quickly and...

Nipe - Script To Redirect All Traffic From The Machine To The Tor Network

Script to redirect all the traffic from the machine to the Tor network. + AUTOR: Vinicius Gouvea + EMAIL: [email protected] + BLOG: https://medium.com/viniciusgouvea + GITHUB: https://github.com/HeitorG + FACEBOOK: https://fb.com/viniciushgouvea Installing: git clone...

Tails Information Disclosure Vulnerability

Tails is an open source Tor-based Linux operating system dedicated to privacy protection, which supports installation on CD-ROMs, USB flash drives, and SD card storage media for direct booting, and is characterized by not storing any data on the local system and providing complete Internet...

Tor Project to Start Bug Bounty Program — Get Paid for HACKING!

The non-profit organization behind TOR – the largest online anonymity network that allows people to hide their real identity online – will soon be launching a "Bug Bounty Program" for researchers who find loopholes in Tor apps. The bounty program was announced during the recurring 'State of the...

CVE-2015-7665

Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a 1 PORT or 2 EPRT command. NOTE: within wget itself, the automatic fallback is not considered a...

CVE-2015-7665

Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a 1 PORT or 2 EPRT command. NOTE: within wget itself, the automatic fallback is not considered a...

CVE-2015-7665

CVE-2015-7665 affects Tails before 1.7 where the wget utility allows passive FTP to fall back to active FTP, enabling remote FTP servers to read PORT/EPRT and reveal the Tor client IP. Root cause: wget’s automatic FTP fallback not restricted. Impact: potential disclosure of the client IP; no expl...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...