Linux Essentials For Hackers - #15 - TOR & Proxychains

Key Takeaways

hey guys welcome back to the linux essentials series for hackers in this video we're going to be talking about how to use stor and proxy gains in conjunction to anonymize your traffic uh you know through the use of any tool that you want so both of these tools don't come pre-installed on you know standard distributions but you can pretty much find them on pen testing and offensive distributions so again what we need to do is install the tor service first not the tor browser but the actual tor service and then secondly we need to install the proxy chains tool so again to install the tour service all we need to do is say sudo sudo apt you can use whatever package manager using sudo apt-get installed and it's pretty much going to be just store that will be the name of the service and i already have it installed so uh again if you just want to check what it is so you can say what is store and this is uh referring to the actual um due to the actual service so you can see that what is a second generation onion router uh so if we say man tor and we hit enter you can see that door uh is a connection oriented anonymizing communication service users i choose a source routed path through a set of nodes uh and negotiate a virtual circuit through the to the network i think i've pretty much explained this before in previous video as to how the tor how tor works um so we'll be using tor now uh to start the tour service we can use system d or you can also use a service um so we can say sudo system control and we say we can say start and then we are looking for tor i think where it is the tor service here i'm not too sure what it is what it's called so if we say tor let's check the status here status store and you can see that we currently have it loaded and active so again the door service is an anonymizing overlay network for tcp so uh if we use netstat here so we can say netstat and we can look for listening tcp connections and we grip for the port that the door service connects through which is 1950 and we hit enter you can see we now have uh you know we are listening on port 9050 and this is localhost so that's perfect we can use this with proxychains all right so now let's talk about proxychain so again uh installing proxychains is very simple so you do have to get install proxychains uh sorry um proxy chains and we enter and i already have it installed uh before we actually use it we now need to uh we need to play around with the configuration file so that we can tweak the the configuration to what we want it to be and how we want it to work so we can say sudo vim etsy proxychains.conf and we hit enter so again pretty much i'll go through the settings that i use uh so again we can use http socks4sox5 uh and again we this allows you to tunnel um or proxy you can you can essentially download your connections through a series of proxies and in our case the proxies are going to be is going to be tor so with dns that's the great thing so uh the options below identify how the proxy list is treated only one option should be common uncommented at a time so dynamic chains uh where each connection will be done via chained proxies all proxy chained in order as they appear in the list at least one proxy must be online to play in the chain i i pretty much like using the random chain so you can see that each connection will be done via random proxy or proxy chain from the list this option is good to test your intrusion detection system because it's constantly changing uh you know through random proxies but if again if you want a dynamic chain that's perfect uh you can also use the strict chain this will ensure that all connection are going to be done through a chain proxy or all proxies will be chained in the order as they appear in the list so i like using a random chain so you want to uncomment this or it will be commented here so if i just hit insert here and it'll pretty much be commented like so and you want to uncomment this we then want to take a look at the proxy dns request so again this will prevent no leak for dns data this is very important you want to make sure that's uncommented and then we want to take a look at the proxy list format so this gives you an idea of how to use your proxy list if you are interested in using other proxies apart from tor you can see that we have socks 5 http sox4 you know in our case the defaults will be set to tor and we want to add socks 5 as well here so we say socks 5 and we can we remember it's running on our local host uh sorry 127.0.0.1 uh 1950 and that's of course going to be um that's going to be socks 5 all right so we can add any of the other proxies we want here so again if you're not keen on using tor you can change this and we'll write changes and quit from here so now when using proxy chains you want to ensure that you have the tos service started and it's currently running and then yield the syntax is very simple so we say proxy chains and then we specify the tool that we want to use so for example i can say proxy chains are firefox uh or i can use another tool like ssh or telnet uh or i could use a tool uh maybe let's try firefox because it's the easiest way to test this so i say firefox and then i open this website dns leaktest.com and we hit enter and that's going to start proxy chains for us now given that it's using door the connection is going to be much slower than you know a standard proxy of course depending on what proxy you end up using so we'll just wait for this to load up and dnsliketest.com will tell us what our ip is and secondly it will tell us what our dns is so you can see it gives us information regarding our ip um for some reason isn't telling us what country it is so again we can just take a standard test this will test our dns to see if we're we're leaking any dns information and of course dns information is very important as it can leak your geographical information so again you can just go through the test and this will display whether or not uh what dns servers you're currently been using so let's wait for this and see what results we get there's a progress bar right over here so you can see that all are going through um dns servers in germany and of course you have their host names and their various ips so again that's great because it was a we were we didn't leak any of our personal dns information that all the dns servers we went through but of course that is also dependent on on you know dns security something that's out of the scope of this video but that's pretty much it for this video uh that's all i wanted to cover and i'll be seeing you in the next video [Music]