Find Servers behind tor

[donkey-fuller]

HI All,
not sure if this is the right place to post this.
But i have always been interested in how LAW enforcement find servers that are on the TOR network.
I am keen to understand this and also learn how to find these servers. Is there anyone that point me in the right direction?

thanks
Fuller.

 

[DimmuBurgor]

server status webrequest (unset hta), front end caching (misconfigured varnish), Carnegie Melon method, Global viewership and other techniques detailed by Neal (guy from fotoforensics), SSL Cert sometimes, messing up modprox, so on

 

[donkey-fuller]

WOW that is really nice list of things you have mentioned there and enough bread crumbs to help start to learn more about this. thank you

 

[mythik]

The onion service only needs to bind to the localhost. If it is configured for an interface IP it might be found because of unique attributes like HTTP headers.

 

[donkey-fuller]

The onion service only needs to bind to the localhost. If it is configured for an interface IP it might be found because of unique attributes like HTTP headers.

Interesting, i never knew this about tor, thank you for sharing this information.

 

[mythik]

Interesting, i never knew this about tor, thank you for sharing this information.

No trouble. I would recommend reading this for learning some examples: https://riseup.net/ca/security/netw...st-practices#be-careful-of-localhost-bypasses

 

[donkey-fuller]

No trouble. I would recommend reading this for learning some examples: https://riseup.net/ca/security/netw...st-practices#be-careful-of-localhost-bypasses

Oh nice that is a good read, for me, appreciate pointing out some starting material.