anonoBlog.github.io/fancy-dot-onion.html at master · anonoBlog/anonoBlog.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Get a fancy .onion name</title>

    <!-- Bootstrap -->
    <link href="bower_components/bootstrap/dist/css/bootstrap.min.css" rel="stylesheet">
    <link href="blog.css" rel="stylesheet">
  </head>
  <body>


    <header class="navbar navbar-static-top bs-docs-nav">
      <div class="container">
        <div class="navbar-header">
          <a href="index.html" class="navbar-brand">Anonoblog</a>
        </div>
        <div class="navbar navbar-static-top bs-docs-nav">
          <ul class="nav navbar-nav">
            <li class="active"> <a href="index.html">Home</a> </li>
            <li> <a href="hidden-service.html">Set up a hidden service</a> </li>
            <li> <a href="fancy-dot-onion.html">Get a fancy .onion name</a> </li>
            <li> <a href="anonymous-server.html">Manage a server anonymously</a></li>
            <li> <a href="scan-for-leaks.html">Scan for leaks</a></li>
          </ul>
        </div>
      </div>
    </header>
    <div class="bs-docs-header">
      <div class="container">
        <h1>Hello, Tor!</h1>
        <div>Creating and running a Tor hidden service anonymously</div>
      </div>
    </div>
    <div class="main-content">
      <div class="container">
      <h2>Use a tool to brute force .onions</h2>
      <p>
        f3yniw7vmrsvjzbm.onion is a pretty ugly name, right? If it's not good enough for Facebook (<a href="https://facebookcorewwwi.onion/">facebookcorewwwi.onion</a>), it's not good enough for us.
      </p>
      <p>
        The .onion name is a hash of a random public key, and we're going to use a tool to generate a lot of them and find one we like. <a href="https://timtaubert.de/blog/2014/11/using-the-webcrypto-api-to-generate-onion-names-for-tor-hidden-services/">More detail about how this works</a>.
      </p>
      <p>
        There are several tools built for this purpose. If you're on Windows, you can try <a href="http://github.com/lachesis/scallion">Scallion</a>. On Mac OS X or Linux, <a href="https://github.com/ReclaimYourPrivacy/eschalot">Eschalot</a> should work. Skip to <a href="anonymous-server.html">manage a server anonymously</a> if you need to set up a server first.
      </p>
<h3>Mac</h3>
<p>This assumes you have make and gcc installed already. If you have Xcode you should be good. If not, try <code>brew install gcc make</code>.</p>

<pre>
brew install openssl
wget https://github.com/ReclaimYourPrivacy/eschalot/archive/master.zip
unzip master.zip
cd eschalot-master
echo "CFLAGS          += -L/usr/local/opt/openssl/lib" >> Makefile
echo "CFLAGS          += -I/usr/local/opt/openssl/include" >> Makefile
make
make test
</pre>

<h3>Debian or Ubuntu</h3>
<pre>
apt-get update
apt-get install make gcc openssl unzip libssl-dev
wget https://github.com/ReclaimYourPrivacy/eschalot/archive/master.zip
unzip master.zip
cd eschalot-master
make
make test
</pre>

<h3>Is it working?</h3>
        <p>
          If that all works you'll start to see output along these lines:
        </p>

<pre>
Found a key for sadpaper (8) - sadpaperp23s5tey.onion
Found a key for oldsmoke (8) - oldsmoke3kn6rky7.onion
Found a key for bentrest (8) - bentrestmpz4psyf.onion
Total hashes: 143760995, running time: 10 seconds, hashes per second: 14376099
Found a key for slowview (8) - slowviewryzixyji.onion
</pre>

<p>Now you'll have some options that are slightly more memorable. If you want to use one of these you'll find the key-pairs in <code>results.txt</code>. </p>

<h2>How to get what you really want</h2>

<p>The two simplest ways to use Eschalot are to specify either a prefix or a regex, e.g. to find a name starting "anblog":</p>

<pre>
./eschalot -vct4 -p anblog
</pre>
<p>or to find a name starting that either starts with "tony" or ends with "eats":</p>
<pre>
./eschalot -vct4 -r "^tony|eats$"
</pre>

<p>The arguments here are specifying verbose mode, continuous (i.e. not stopping when we find a match), and running in parallel on 4 threads (you should adjust this to match the number of CPU cores you have).</p>

<p>Note that these examples find results pretty quickly since only 4 letters have to match; the longer you make your search pattern, the longer it'll probably take. Up to 6 characters should be quick enough for the workshop (within a few minutes). 8 characters is feasible later (expect results within a day).</p>

<p>Another option is to use <code>./worgen</code> to generate word lists to use as acceptable prefixes (see usage instructions), and specify the resulting file as input to Eschalot using <code>-f</code>.</p>

<p>Type <code>./eschalot</code> or <code>./worgen</code> without arguments for usage information.</p>

<h2>Using your name</h2>
<p>
Replace the private key in <code>/usr/local/etc/tor/hidden_http_service/private_key</code> (or wherever you specified the <code>HiddenServiceDir</code> to be in your <code>torrc</code>) with the Eschalot-generated one (including its header and footer). Restart your Tor. It should update <code>/usr/local/etc/tor/hidden_http_service/hostname</code>, and you should find your fancy new .onion is alive.
</p>

<p class="center">
      <img src="tony.jpeg" />
</p>

      <h2>Next</h2>
      <p>
        <a href="anonymous-server.html">Manage a server anonymously</a>
      </p>

<br/><hr/><br/>
<p class="center"><a href="https://github.com/anonoBlog/anonoBlog.github.io">Anonoblog</a> | Robin Doherty | <a href="https://robindoherty.com">robindoherty.com</a> | <a href="https://twitter.com/rdoh">@rdoh</a> | <a href="mailto:rdoherty@gmail.com">rdoherty@gmail.com</a> | <a href="https://keybase.io/rdoh">PGP</a> </p>

      </div>
    </div>
    <!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
    <script src="bower_components/jquery/dist/jquery.min.js"></script>
    <!-- Include all compiled plugins (below), or include individual files as needed -->
    <script src="bower_components/bootstrap/dist/js/bootstrap.min.js"></script>
  </body>
</html>