I searched whole Internet to find how to make my traffic go through tor.
For example, if I do an Nmap scan on an Internet website to discover all open ports and running services, can I make it go through tor so my IP is hidden?
I found some blogs and videos about that. They use tool called socat but I don't understand it well how it works.
Can I use Iptables to redirect all traffic to go through that particular port where tor is running? Can I even add proxychain and ssh tunneling?
If I do this then I can't use reverse payloads, right?
I would really like if someone has time and desire talk about these things and explain them to me😉
Thanks in advance.👍
DO NOT DEAL WITH THIS MEMBER
Jul 28, 2015 09:14 AM
(This post was last modified: Jul 28, 2015 09:16 AM by Chillingworth.)
torsocks is probably what you're looking for. If you intend to transparently proxy Kali virtual machine, run torsocks virtualbox via the command line on your base operating system. This will force all of VirtualBox's traffic through the Tor network and effectively prevent DNS leaks. If you use VM software other than VirtualBox (I.e. KDM) then replace virtualbox with the name of the software.
If I do this and launch a metasploit attack, everything will go through tor, right?
I am using VMvare software. Is it supported?
And thank you for answering:D
(Jul 28, 2015 09:14 AM)Chillingworth Wrote: torsocks is probably what you're looking for. If you intend to transparently proxy Kali virtual machine, run torsocks virtualbox via the command line on your base operating system. This will force all of VirtualBox's traffic through the Tor network and effectively prevent DNS leaks. If you use VM software other than VirtualBox (I.e. KDM) then replace virtualbox with the name of the software.
That sounds like Whonix to me with Kali as the workstation.
Jul 28, 2015 10:11 AM
(This post was last modified: Jul 28, 2015 10:22 AM by Gruja.)
Oh. But, I don't want every single tool that I use to go through tor just as in Whonix. I want just tools that I use to touch some server and computers like Nmap, metasploit... Can I do that?
tor is slow :/ i use vpn with no logging
What the others think? What is better option?
DO NOT DEAL WITH THIS MEMBER
I would just use a VPN. They are faster, and also more secure than the tor network, it also protects everything on your computer that uses the internet, not just your browser.
DO NOT DEAL WITH THIS MEMBER
Jul 28, 2015 03:37 PM
(This post was last modified: Jul 28, 2015 03:43 PM by Chillingworth.)
(Jul 28, 2015 10:11 AM)Gruja Wrote: Oh. But, I don't want every single tool that I use to go through tor just as in Whonix. I want just tools that I use to touch some server and computers like Nmap, metasploit... Can I do that?
Why not? What difference does it make?
(Jul 28, 2015 09:33 AM)PhantomElite Wrote: That sounds like Whonix to me with Kali as the workstation.
Pretty good analogy 👍
(Jul 28, 2015 01:21 PM)Supreme.tm Wrote: I would just use a VPN. They are faster, and also more secure than the tor network, it also protects everything on your computer that uses the internet, not just your browser.
If you knew how Tor and VPNs work then you would realize that Tor by design is much more robust than any VPN out there.
Jul 28, 2015 04:21 PM
(This post was last modified: Jul 28, 2015 04:23 PM by Goodies.)
(Jul 28, 2015 03:37 PM)Chillingworth Wrote: If you knew how Tor and VPNs work then you would realize that Tor by design is much more robust than any VPN out there.
And if you knew how Tor and VPNs actually work, then you'd realize that VPN's, by design, are far more robust than Tor. Tor provides better encryption and anonymity, but VPN's provide better stability, reliability, usage, and overall security. But of course you have a rigorous and incorrect understanding of what a VPN is. Relying on anonymous relay servers to handle your data is not what I'd call "robust." Tor is a major target of every branch of every three-letter federal acronym. Don't delude yourself into thinking that Tor provides anonymity in some ethereal, impenetrable sense. VPN's don't either, but they are inherently more robust than Tor ever will be.
Find proxychains + tor Debian installation instructions, then before every command you run in terminal put "proxychains " in front of it.
DO NOT DEAL WITH THIS MEMBER
Jul 28, 2015 05:39 PM
(This post was last modified: Jul 28, 2015 06:01 PM by Chillingworth.)
(Jul 28, 2015 04:21 PM)Goodies Wrote: And if you knew how Tor and VPNs actually work, then you'd realize that VPN's, by design, are far more robust than Tor. Tor provides better encryption and anonymity, but VPN's provide better stability, reliability, usage, and overall security. But of course you have a rigorous and incorrect understanding of what a VPN is. Relying on anonymous relay servers to handle your data is not what I'd call "robust." Tor is a major target of every branch of every three-letter federal acronym. Don't delude yourself into thinking that Tor provides anonymity in some ethereal, impenetrable sense. VPN's don't either, but they are inherently more robust than Tor ever will be.
Not saying that Tor is some sort of utopia because it definitely is not. We can both agree that Tor provides better encryption and anonymity and I can agree with you in that VPNs provide better stability and usage but reliability and security depends entirely on the context. If you're an avid Internet inhabitant that's looking for increased privacy then VPNs are the way to go. However, if you are subject to law enforcement intervention then Tor is by far the better solution. In regards to security, with Tor you have a greater chance of having your traffic maliciously handled by arbitrary exit nodes although with VPNs, you're more susceptible to targeted attacks against YOU specifically (i.e. there's a better chance of an adversary compromising your VPN provider than hoping you'll build a Tor circuit containing their exit node). Which is overall more robust depends on your threat model. For the cyber criminal, Tor is undoubtedly the superior choice. For the average Internet denizen? A trustworthy VPN that won't sniff your traffic is the better option.
(Jul 28, 2015 05:39 PM)Chillingworth Wrote: Not saying that Tor is some sort of utopia because it definitely is not. We can both agree that Tor provides better encryption and anonymity and I can agree with you in that VPNs provide better stability and usage but reliability and security depends entirely on the context. If you're an avid Internet inhabitant that's looking for increased privacy then VPNs are the way to go. However, if you are subject to law enforcement intervention then Tor is by far the better solution. In regards to security, with Tor you have a greater chance of having your traffic maliciously handled by arbitrary exit nodes although with VPNs, you're more susceptible to targeted attacks against YOU specifically (i.e. there's a better chance of an adversary compromising your VPN provider than hoping you'll build a Tor circuit containing their exit node). Which is overall more robust depends on your threat model. For the cyber criminal, Tor is undoubtedly the superior choice. For the average Internet denizen? A trustworthy VPN that won't sniff your traffic is the better option.
I just wish you explained yourself like this in the first place because there's very little, if anything, that I disagree with here.
Jul 28, 2015 07:34 PM
(This post was last modified: Jul 28, 2015 07:37 PM by Culperring722.)
Na bro its all about that proxyham you can connect to wifi hotspot from 2 miles away. Then you use VPN, or Tor , or Proxychain or nothing cuz you 2 miles away so who cares.
(Jul 28, 2015 05:39 PM)Chillingworth Wrote: Not saying that Tor is some sort of utopia because it definitely is not. We can both agree that Tor provides better encryption and anonymity and I can agree with you in that VPNs provide better stability and usage but reliability and security depends entirely on the context. If you're an avid Internet inhabitant that's looking for increased privacy then VPNs are the way to go. However, if you are subject to law enforcement intervention then Tor is by far the better solution. In regards to security, with Tor you have a greater chance of having your traffic maliciously handled by arbitrary exit nodes although with VPNs, you're more susceptible to targeted attacks against YOU specifically (i.e. there's a better chance of an adversary compromising your VPN provider than hoping you'll build a Tor circuit containing their exit node). Which is overall more robust depends on your threat model. For the cyber criminal, Tor is undoubtedly the superior choice. For the average Internet denizen? A trustworthy VPN that won't sniff your traffic is the better option.
Yes, you are definitely correct. The best way would be to use them both.
But let's come back on my question. How to make my traffic go through tor? If I use both, how to make my traffic go through both, VPN and Tor.
Can I use proxychains or what?
Let's say like this. In my configuration file of proxychains is a line that would redirect traffic through Tor port, 9050. So, if I use command proxychains msfconsole or proxychains nmap, would all traffic go through Tor?
Is it correct?
|
