(untitled)

Hi! I am interested in exploits/re, so I wanted to look for TOR hacking forums and I've found 0day.su -> http://qzbkwswfv5k2oj5d.onion I am not sure about registering to their's jabber service. I am concerned that it will reveal my true IP address (beceause jabber isn't proxied in any way, just like IRC). http://qzbkwswfv5k2oj5d.onion/jabber.html

If your chat software does not include a SOCKS5 proxy configuration option then you can force it through Tor using the Torify tool or proxychains.

>>2777 I'will try it Do you know about any tools/sites which can scan my TOR configuration for vulnerabilities/IP reveal (especially SCOKS5). Also scanner for pidgin would be nice but I don't think such tool exist

>>2778 >Do you know about any tools/sites which can scan my TOR configuration for vulnerabilities/IP reveal These guys are good but it will only check web browsers. http://ip-check.info/ >Also scanner for pidgin would be nice but I don't think such tool exist I don't think it exists either. You can configure your firewall or use Linux network namespaces to stop non-Tor traffic from leaking. This post has details. >>1364

>>2776 >.onion website >offers clearnet-only jabber server totally_not_virus.txt.exe

It's Tor, not TOR. https://www.torproject.org/docs/faq.html.en#WhyCalledTor Any "hacking" forums on Tor will be for skiddies, by skiddies. Most IRC and Jabber/XMPP clients support Socks4/5, which is what you use to proxy connections through Tor. Also: https://github.com/rofl0r/proxychains-ng https://github.com/dgoulet/torsocks If you want to see exploits you don't need to go on Tor: https://www.exploit-db.com Same with RE: https://www.reddit.com/r/ReverseEngineering

>>2784 Well, I've seen both exploit-db and r/ReverseEngineering before, but I am just curious about Tor

>>2784 By the way Blueborne looks pretty cool

>>2784 >Any "hacking" forums on Tor will be for skiddies, by skiddies. HackBB was pretty good. Back in the Freedom Hosting days.

>>2784 >It's Tor, not TOR. https://www.torproject.org/docs/faq.html.en#WhyCalledTor Mega autist alert Do not approach IRL(Always argue in good faith and avoid personal attacks.)

>>2788 No. It is important and >>2784 is correct for pointing this out.

>>2778 I would not recommend pidgin for such usage. You should take a look at the tor messenger project. https://blog.torproject.org/tor-messenger-beta-chat-over-tor-easily

irssi+otr for IRC and xmpp-client for XMPP services, xmpp ask if you need to use Tor proxy.

>>2780 I'm not the one you quoted, but this was a answer to what I was looking for, I know it's a simple question, but I still need regular internet, I always use tor with second user that is not root, of course. I was wondering if can I do this iptables be only valid for this user? so I can keep the other without this rule. Is it possible, if so, what should I do?

ill get some h8 for this no doubt, but tor's fuarrrkin garbage. centralized dns poisoning and network monitoring has made it completely obsolete. if you're interested in exploits, traffic flow monitoring is definitely a problem and going to be a bigger problem in the future. Frickin bicycles. I recommend I2P. It's slightly less bad.