[Skeetz]

This is against HF's rules. Discussion of the deep web is not allowed.

[Lrrr]

This is against HF's rules. Discussion of the deep web is not allowed.

Discussion of TOR and how it works is allowed. Please feel free to report this post, but I already had it OKed by staff.

[SIM-2848947]

Kind of laughing at some of the replies right now xD Good work Lrrr. The tutorial does what it intends and does it well.

One thing for anyone trying to connect to the instance with Putty. You need to download Putty Gen and change your .pem file into a putty private key (a .ppk). Then underneath Auth in putty you should be able to select the key.

I remember having problems with that first time I used ec2 and then relising how much of an idiot I was being.

[AliasIlias]

Thanks for this HQ tutorial, will read it better when I have some more time.

[Lrrr]

One thing for anyone trying to connect to the instance with Putty. You need to download Putty Gen and change your .pem file into a putty private key (a .ppk). Then underneath Auth in putty you should be able to select the key.

I remember having problems with that first time I used ec2 and then relising how much of an idiot I was being.

Great point, sorry I totally forgot about the windows thing. PuttyGen is avalible at the official putty site. As RYDIOO stated, convert the pem to a ppk file to connect if you are using AWS. QUOTES this in the tutorial

[ShNuG]

Amazing, Tutorial. Can you please add or make another thread on making it truly anonymous ? :)

[Lrrr]

Amazing, Tutorial. Can you please add or make another thread on making it truly anonymous ? :)

I could probably make another tutorial about securing a system that runs a tor bridge for countries that monitor tor usage....

I'm not sure when exactly I could get around to writing it though, but thats what you would want to look into.

Basically, a hardened minimal OS, with OpenVPN as a gateway for your second minimal application instance. Look into the way Whonix operates :)

[Pharaoh1100]

Amazing, Tutorial. Can you please add or make another thread on making it truly anonymous ? :)

Securing the server sounds easy, but it requires a lot of work. First of all, you should be acknowledged about the exploits, to which protocols are vulnerable in the Tor and network sphere. Be sure to, either have you, or someone from your team, that follows the news regarding exploits and such, then patch them as soon as you get acknowledged.
Your site's vulnerabilities.
And then the easiest, but most work-requiring thing, have a virtual machine, inside a virtual machine. Not a RDP, nor a VPS, but a VM.
VM (1) Whonix Gateway > VM (2) Tails Linux > VM (And here's where you should configure, modify, and host your server) (3) I'd go for Kali Linux.
Use a proxifier, and SSH tunneling routed through Tor in the end of the virtual machine chain.
Have your own dedicated server, and run your own proxy on it, which you could use with the proxifier as a great advantage, such as DDoS immunity. Not fully, but it's strong.
Hosting a darknet service requires a lot of work. You'd need, not only experienced, but a staff that is experienced and trust-worthy.

AND, always, PATCH, PATCH, PATCH.
If there's a Tor update, UPDATE IT! If you don't, you'd be vulnerable to exploits.
ALSO, Tor bridge relays https://www.torproject.org/docs/bridges.html.en so that your VPNP/ISP wouldn't know, if you're using Tor network.
And also, if you have an experienced russian friend, this is of an emormous priority.
Russian hackers are the most skillful ones, followed by asian hackers.

[Lrrr]

Securing the server sounds easy, but it requires a lot of work. First of all, you should be acknowledged about the exploits, to which protocols are vulnerable in the Tor and network sphere. Be sure to, either have you, or someone from your team, that follows the news regarding exploits and such, then patch them as soon as you get acknowledged.
Your site's vulnerabilities.
And then the easiest, but most work-requiring thing, have a virtual machine, inside a virtual machine. Not a RDP, nor a VPS, but a VM.
VM (1) Whonix Gateway > VM (2) Tails Linux > VM (And here's where you should configure, modify, and host your server) (3) I'd go for Kali Linux.
Use a proxifier, and SSH tunneling routed through Tor in the end of the virtual machine chain.
Have your own dedicated server, and run your own proxy on it, which you could use with the proxifier as a great advantage, such as DDoS immunity. Not fully, but it's strong.
Hosting a darknet service requires a lot of work. You'd need, not only experienced, but a staff that is experienced and trust-worthy.

AND, always, PATCH, PATCH, PATCH.
If there's a Tor update, UPDATE IT! If you don't, you'd be vulnerable to exploits.
ALSO, Tor bridge relays https://www.torproject.org/docs/bridges.html.en so that your VPNP/ISP wouldn't know, if you're using Tor network.
And also, if you have an experienced russian friend, this is of an emormous priority.
Russian hackers are the most skillful ones, followed by asian hackers.

Finally a half decent addition, thanks.

[ballack_perllo]

Great job man!....................

[Confound]

Very solid tutorial. Thanks for the share, Lrrr.

[Armada]

Great write up man, enjoyed the read.🤝

[Lrrr]

Great job man!....................

Very solid tutorial. Thanks for the share, Lrrr.

Great write up man, enjoyed the read.🤝

Thanks Guys!

[Fantom4242]

Securing the server sounds easy, but it requires a lot of work. First of all, you should be acknowledged about the exploits, to which protocols are vulnerable in the Tor and network sphere. Be sure to, either have you, or someone from your team, that follows the news regarding exploits and such, then patch them as soon as you get acknowledged.
Your site's vulnerabilities.
And then the easiest, but most work-requiring thing, have a virtual machine, inside a virtual machine. Not a RDP, nor a VPS, but a VM.
VM (1) Whonix Gateway > VM (2) Tails Linux > VM (And here's where you should configure, modify, and host your server) (3) I'd go for Kali Linux.
Use a proxifier, and SSH tunneling routed through Tor in the end of the virtual machine chain.
Have your own dedicated server, and run your own proxy on it, which you could use with the proxifier as a great advantage, such as DDoS immunity. Not fully, but it's strong.
Hosting a darknet service requires a lot of work. You'd need, not only experienced, but a staff that is experienced and trust-worthy.

AND, always, PATCH, PATCH, PATCH.
If there's a Tor update, UPDATE IT! If you don't, you'd be vulnerable to exploits.
ALSO, Tor bridge relays https://www.torproject.org/docs/bridges.html.en so that your VPNP/ISP wouldn't know, if you're using Tor network.
And also, if you have an experienced russian friend, this is of an emormous priority.
Russian hackers are the most skillful ones, followed by asian hackers.

This guy is clearly uneducated towards Linux Distributions, and their differnet functions, but he did mention some very good points.

To add to this, the Linux Distro, which anyone should be using, first of all, should be on a computer, which purpose would serve as a workstation, and the distribution should be focused on being server-host. Gentoo hardened is a pretty good suggestion.

Pretty much patch, patch, and patch, but a lot of things. Linux's kernel, your distribution, the website's vulnerabilities, etc, etc.
Anyone, who is planning to host a site, should know that he is obligated to be up-to-date with the news regarding his Linux Distro, and site.

I can help anyone out, if you need help on the security, PM me, I'd be more than glad to help for free.
Thank you for the great tutorial, OP, sorry for biasing off the main post so much.

[R^ptor]

Good and more secure this way.