Deanonymization of TOR HTTP hidden services

Presented at DEF CON 30 (2022), Aug. 12, 2022, 5:30 p.m. (20 minutes).

Anonymity networks such as Tor are used to protect the identity of people or services. Several deanonymization techniques have been described over time. Some of them attacked the protocol, others exploited various configuration issues. Through this presentation I will focus on deanonymization techniques of the http services of such networks by exploiting configuration issues.

In the first part of the presentation, I will present deanonymization techniques on TOR which are public, and I will also present the techniques developed by me and the interesting story of how I came to develop them.

In the last part of my presentation, I will do a demo with the exploitation of http hidden services in TOR and I will present each technique separately. I will also present how one of the techniques can be used successfully not only in the TOR network, but also on the internet in order to obtain information about the server that will help you discover other services.

Presenters:

• Ionut Cernica - PHD Student Department of Computer Science, Faculty of Automatic Control and Computer Science, University Politehnica of Bucharest
  Ionut Cernica started his security career with the bug bounty program from Facebook. His passion for security led him to get involved in dozens of such programs and he found problems in very large companies such as Google, Microsoft, Yahoo, AT&T, eBay, VMware. He has also been testing web application security for 9 years and has had many projects on the penetration testing side. Another stage of his career was to get involved in security contests and participated in more than 100 such contests. He also reached important finals such as Codegate, Trend Micro and Defcon with the PwnThyBytes team. He also won several individual competitions, including the mini CTF from the first edition of Appsec village - Defcon village. Now he is doing research in the field of web application security, being also a PhD student at University Polytechnic of Bucharest. Through his research he wants to innovate in the field and to bring a new layer of security to web applications.

Links:

• https://forum.defcon.org/node/241995
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Ionut Cernica - Deanonymization of TOR HTTP Hidden Services.mp4
• https://infocon.org/cons/DEF CON/DEF CON 30/DEF CON 30 video and slides/DEF CON 30 - Ionut Cernica - Deanonymization of TOR HTTP Hidden Services.srt (subtitles)
• https://www.youtube.com/watch?v=v45_tkKCJ54

Similar Presentations:

• 31C3 (2014) / Tor: Hidden Services and Deanonymisation
• LayerOne 2018 / Leeky Onions: Deanonymizing Live Tor Hidden Services
• Still Hacking Anyway (SHA2017) / Tor de-anonymization techniques: How people have lost their anonymity? Let's study real-world cases and try to learn how to avoid these errors.