Compare commits
6 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| a3a651a53a | |||
| 01a80468e6 | |||
| b09c5dd6c9 | |||
| 988bb6fa56 | |||
| 5f861516eb | |||
| 18702e2914 |
BIN
opsec/anonproxy/AccessAllowed.jpg
Normal file
BIN
opsec/anonproxy/AccessAllowed.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 19 KiB |
BIN
opsec/anonproxy/AccessDenied.jpg
Normal file
BIN
opsec/anonproxy/AccessDenied.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 17 KiB |
BIN
opsec/anonproxy/CheckIP.png
Normal file
BIN
opsec/anonproxy/CheckIP.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 50 KiB |
BIN
opsec/anonproxy/Deposit.png
Normal file
BIN
opsec/anonproxy/Deposit.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 71 KiB |
BIN
opsec/anonproxy/FoxyProxyAdd.png
Normal file
BIN
opsec/anonproxy/FoxyProxyAdd.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 36 KiB |
BIN
opsec/anonproxy/FoxyProxyInstall.png
Normal file
BIN
opsec/anonproxy/FoxyProxyInstall.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 53 KiB |
BIN
opsec/anonproxy/FoxyProxyInstall2.png
Normal file
BIN
opsec/anonproxy/FoxyProxyInstall2.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 11 KiB |
BIN
opsec/anonproxy/FoxyProxyOptions.png
Normal file
BIN
opsec/anonproxy/FoxyProxyOptions.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 15 KiB |
BIN
opsec/anonproxy/FoxyProxySearch.png
Normal file
BIN
opsec/anonproxy/FoxyProxySearch.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 22 KiB |
BIN
opsec/anonproxy/FoxyProxySearch2.png
Normal file
BIN
opsec/anonproxy/FoxyProxySearch2.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 58 KiB |
BIN
opsec/anonproxy/InstallAddon.png
Normal file
BIN
opsec/anonproxy/InstallAddon.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 34 KiB |
BIN
opsec/anonproxy/Proxy.png
Normal file
BIN
opsec/anonproxy/Proxy.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 61 KiB |
BIN
opsec/anonproxy/ProxyData.png
Normal file
BIN
opsec/anonproxy/ProxyData.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 31 KiB |
BIN
opsec/anonproxy/Reg.png
Normal file
BIN
opsec/anonproxy/Reg.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 32 KiB |
BIN
opsec/anonproxy/WebsiteAccessed.png
Normal file
BIN
opsec/anonproxy/WebsiteAccessed.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 312 KiB |
BIN
opsec/anonproxy/WebsiteDenied.png
Normal file
BIN
opsec/anonproxy/WebsiteDenied.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 34 KiB |
204
opsec/anonproxy/index.html
Normal file
204
opsec/anonproxy/index.html
Normal file
@ -0,0 +1,204 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<meta name="description" content="">
|
||||||
|
<meta name="author" content="prism_breaker">
|
||||||
|
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||||
|
|
||||||
|
<title>Anonymouse Residential Proxy</title>
|
||||||
|
|
||||||
|
<!-- Bootstrap core CSS -->
|
||||||
|
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
|
||||||
|
<link href="../../assets/css/xt256.css" rel="stylesheet">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<!-- Custom styles for this template -->
|
||||||
|
<link href="../../assets/css/main.css" rel="stylesheet">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||||
|
<!--[if lt IE 9]>
|
||||||
|
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||||
|
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||||
|
<![endif]-->
|
||||||
|
</head>
|
||||||
|
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<!-- Static navbar -->
|
||||||
|
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||||
|
<div class="container">
|
||||||
|
<div class="navbar-header">
|
||||||
|
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
</button>
|
||||||
|
<a class="navbar-brand-anon" href="\index.html">The Nihilism Blog</a>
|
||||||
|
</div>
|
||||||
|
<div class="navbar-collapse collapse">
|
||||||
|
<ul class="nav navbar-nav navbar-right">
|
||||||
|
|
||||||
|
<li><a href="/about.html">About</a></li>
|
||||||
|
<li><a href="/blog.html">Categories</a></li>
|
||||||
|
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
|
||||||
|
<li><a href="/contact.html">Contact</a></li>
|
||||||
|
</ul>
|
||||||
|
</div><!--/.nav-collapse -->
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- +++++ Posts Lists +++++ -->
|
||||||
|
<!-- +++++ First Post +++++ -->
|
||||||
|
<div id="anon2">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>prism_breaker</ba></p>
|
||||||
|
<h1>Setup a anonymous residential proxy with tor browser</h1>
|
||||||
|
<p>OPSEC Recommendations:
|
||||||
|
Hardware : Personal Computer / Laptop
|
||||||
|
<br>Host OS: Qubes (or Qubes OS like you mentionned)
|
||||||
|
<br>Hypervisor: Xen
|
||||||
|
<br>Virtual Machine: Whonix VM DEDICATED to the (you -> tor -> residential proxy -> website) setup</p>
|
||||||
|
<p>Tor is strong protection of user privacy, but some services are not possible to access because tor exits nodes are blocked. These services are usually very privacy unfriendly, because the web service is intentionally deanonymising its users.</p>
|
||||||
|
<img src="AccessDenied.jpg" class="imgRz">
|
||||||
|
<p>A residential proxy will reroute your access through a low risk ip address, which makes your access looks like average Joe. Under this setup you can access those website that attempt to block anonymous users, while still under the protection of tor.</p>
|
||||||
|
<img src="AccessAllowed.jpg" class="imgRz">
|
||||||
|
|
||||||
|
<p style="color: red;">Warning: This setup is not officialy supported by tor project, it should be considered as experimental. It is still recommended to use the default setup of Whonix and Tor browser.</p>
|
||||||
|
|
||||||
|
<p>For further research you can refer to this tutorial <a href="https://blog.nowhere.moe/opsec/torthroughvpn/index.html">https://blog.nowhere.moe/opsec/torthroughvpn/index.html</a></p>
|
||||||
|
<p >Readers are assumed to have a working Qubes-Whonix setup, and have already acquired monero anonymously.
|
||||||
|
If not, read the below tutorials: to be done</p>
|
||||||
|
|
||||||
|
<p>Other useful reference: <a href="https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_proxy">https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_proxy</a> </p>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /grey -->
|
||||||
|
|
||||||
|
<!-- +++++ Second Post +++++ -->
|
||||||
|
<div id="anon3">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Proxy Purchase</b></h2>
|
||||||
|
<p><p style="color: red;">Warning: All opertions below should be done inside a dedicated new whonix workstation appvm qube!</p></p>
|
||||||
|
<p><a href="https://smspool.net/">smspool.net</a> is chosen to be the proxy provider for this demo, the author is not affiliated with this service. It is used because it is monero friendly, other service providers should work similarly.</p>
|
||||||
|
<p>First you need to register</p>
|
||||||
|
<img src="Reg.png" style="width: 400px; height: auto;" class="small">
|
||||||
|
<p>Choose "switch to hCaptcha" otherwise you might get stuck at the cloudflare verification.</p>
|
||||||
|
<p>The next step is to deposit monero into the website and purchase the proxy.</p>
|
||||||
|
<img src="Deposit.png" class="imgRz">
|
||||||
|
<p>When your deposit get credited, purchase the proxy.</p>
|
||||||
|
<img src="Proxy.png" class="imgRz">
|
||||||
|
<p>Now your proxy is ready, check for the details inside "My Proxy" section.</p>
|
||||||
|
<img src="ProxyData.png" class="imgRz">
|
||||||
|
<p>Copy your proxy ip, port, username, password. It will be used later.</p>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
<div id="anon2">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Browser setup</b></h2> </br> </br>
|
||||||
|
<p>Due to upstream change, the proxy setup method mentioned in whonix tutorial is not working <a href="https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_proxy/Proxy_Settings_Method">https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_proxy/Proxy_Settings_Method</a></p>
|
||||||
|
|
||||||
|
<p>The only method I found that is working is to use the foxyproxy addon. Install an plugin will change tor browser fingerprint, so it is higely recommended you create a new appvm for this setup, and use this setup only when it is absolutely necessary.</p>
|
||||||
|
<img src="InstallAddon.png" style="width: 400px; height: auto;" class="imgRz">
|
||||||
|
<p>Choose the "add-ons and themes" in the firefox menu and search for foxyproxy.</p>
|
||||||
|
<img src="FoxyProxySearch.png" class="imgRz">
|
||||||
|
<p></p>
|
||||||
|
<img src="FoxyProxySearch2.png" class="imgRz">
|
||||||
|
|
||||||
|
<p>Install the plugin, pin the plugin and allow it to work in private windows.</p>
|
||||||
|
<img src="FoxyProxyInstall.png" class="imgRz">
|
||||||
|
<P></P>
|
||||||
|
<img src="FoxyProxyInstall2.png" style="width: 400px; height: auto;" class="imgRz">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
|
||||||
|
<!-- +++++ Second Post +++++ -->
|
||||||
|
<div id="anon1">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Connect to Proxy</b></h2> </br> </br>
|
||||||
|
<p>Finally, we will connect to the proxy we just purchased.</p>
|
||||||
|
<p>First find foxyproxy in the menu bar and choose "options".</p>
|
||||||
|
<img src="FoxyProxyOptions.png" style="width: 400px; height: auto;" class="imgRz">
|
||||||
|
<p>Add the proxy information in the "proxy" tab.</p>
|
||||||
|
<img src="FoxyProxyAdd.png" class="imgRz">
|
||||||
|
<p>In this demo, the proxy is HTTP, if you use a different provider and it doesn't work, try to check the protocol. Fill all the info and save it.</p>
|
||||||
|
<p>Now check the website you want to accessed, it is blocked because you are still using the tor exit node.</p>
|
||||||
|
<img src="WebsiteDenied.png" class="imgRz">
|
||||||
|
<p>Choose the proxy you just added in FoxyProxy button, and reset your tor browser identity.</p>
|
||||||
|
<p>Now access <a href="https://check.torproject.org">https://check.torproject.org</a>, and you should see a warning says you are not using tor.</p>
|
||||||
|
<img src="CheckIP.png" class="imgRz">
|
||||||
|
<p>Now try the website that blocks tor, it should work now if you did everything correctly!</p>
|
||||||
|
<img src="WebsiteAccessed.png" class="imgRz">
|
||||||
|
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
<!-- +++++ Footer Section +++++ -->
|
||||||
|
|
||||||
|
<div id="anonb">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>PrismBreaker</h4>
|
||||||
|
<p>
|
||||||
|
Shatter the big brother.</p></br></br><p>Creative Commons Zero: No Rights Reserved</br><img src="\CC0.png">
|
||||||
|
|
||||||
|
</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>My Links</h4>
|
||||||
|
<p>
|
||||||
|
|
||||||
|
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
|
||||||
|
|
||||||
|
</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>About nihilist</h4>
|
||||||
|
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 87iB34vdFvNULrAjyfVAZ7jMXc8vbq9tLGMLjo6WC8N9Xo2JFaa8Vkp6dwXBt8rK12Xpz5z1rTa9jSfgyRbNNjswHKTzFVh</p></br><p><u>Contact:</u> prismbreaker@waifu.club (<a href="https://keys.openpgp.org/vks/v1/by-fingerprint/735816B2B9E6F4660ECE44D983E602C4B6EA6AEE">PGP</a>)</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
|
||||||
|
<!-- Bootstrap core JavaScript
|
||||||
|
================================================== -->
|
||||||
|
<!-- Placed at the end of the document so the pages load faster -->
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
BIN
opsec/syncthing/1.png
Normal file
BIN
opsec/syncthing/1.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 80 KiB |
BIN
opsec/syncthing/10.png
Normal file
BIN
opsec/syncthing/10.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 36 KiB |
BIN
opsec/syncthing/11.png
Normal file
BIN
opsec/syncthing/11.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 64 KiB |
BIN
opsec/syncthing/2.png
Normal file
BIN
opsec/syncthing/2.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 27 KiB |
BIN
opsec/syncthing/3.png
Normal file
BIN
opsec/syncthing/3.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 18 KiB |
BIN
opsec/syncthing/4.png
Normal file
BIN
opsec/syncthing/4.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 64 KiB |
BIN
opsec/syncthing/5.png
Normal file
BIN
opsec/syncthing/5.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 16 KiB |
BIN
opsec/syncthing/6.png
Normal file
BIN
opsec/syncthing/6.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 56 KiB |
BIN
opsec/syncthing/7.png
Normal file
BIN
opsec/syncthing/7.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 38 KiB |
BIN
opsec/syncthing/8.png
Normal file
BIN
opsec/syncthing/8.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 61 KiB |
BIN
opsec/syncthing/9.png
Normal file
BIN
opsec/syncthing/9.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 54 KiB |
BIN
opsec/syncthing/Syncthing_circuit.jpg
Normal file
BIN
opsec/syncthing/Syncthing_circuit.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 24 KiB |
257
opsec/syncthing/index.html
Normal file
257
opsec/syncthing/index.html
Normal file
@ -0,0 +1,257 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<meta name="description" content="">
|
||||||
|
<meta name="author" content="">
|
||||||
|
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||||
|
|
||||||
|
<title>Syncthing anonymous file sharing</title>
|
||||||
|
|
||||||
|
<!-- Bootstrap core CSS -->
|
||||||
|
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
|
||||||
|
<link href="../../assets/css/xt256.css" rel="stylesheet">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<!-- Custom styles for this template -->
|
||||||
|
<link href="../../assets/css/main.css" rel="stylesheet">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||||
|
<!--[if lt IE 9]>
|
||||||
|
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||||
|
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||||
|
<![endif]-->
|
||||||
|
</head>
|
||||||
|
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<!-- Static navbar -->
|
||||||
|
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||||
|
<div class="container">
|
||||||
|
<div class="navbar-header">
|
||||||
|
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
<span class="icon-bar"></span>
|
||||||
|
</button>
|
||||||
|
<a class="navbar-brand-anon" href="\index.html">The Nihilism Blog</a>
|
||||||
|
</div>
|
||||||
|
<div class="navbar-collapse collapse">
|
||||||
|
<ul class="nav navbar-nav navbar-right">
|
||||||
|
|
||||||
|
<li><a href="/about.html">About</a></li>
|
||||||
|
<li><a href="/blog.html">Categories</a></li>
|
||||||
|
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
|
||||||
|
<li><a href="/contact.html">Contact</a></li>
|
||||||
|
</ul>
|
||||||
|
</div><!--/.nav-collapse -->
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- +++++ Posts Lists +++++ -->
|
||||||
|
<!-- +++++ First Post +++++ -->
|
||||||
|
<div id="anon2">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>Prism_Breaker</ba></p>
|
||||||
|
<h1>Use syncthing to share large file over tor </h1>
|
||||||
|
<p>Onionshare is a good choice when you want to share small files over tor. But onionshare cannot handle big files, when tor circuit fails(which is quite common) your download simply fails, and it does not support resuming the download at where it fails. Syncthing is a better alternative for sharing big files over tor, it does not need any setup or hosting, and it will automatically retry at break point when network fails.</p>
|
||||||
|
|
||||||
|
<p>Syncthing is FOSS software and has E2EE by default, and can run without a clearnet ip address. This means you can just spin up a client, and your data will be encrypted and sent through syncthing network. If you have a threat model that needs a way to reliably share files with minimum exposure, this setup will be suitable.</p>
|
||||||
|
|
||||||
|
<p>Syncthing has its own relays for supporting transmission of files between peers which are both behind the nat, and it works when both parties are behind tor. This guarantees the anonymity of both parties.</p>
|
||||||
|
|
||||||
|
<p>OPSEC Recommendations:
|
||||||
|
|
||||||
|
<br>1.Hardware : (Personal Computer / Laptop)
|
||||||
|
<br>2.Host OS: Linux (Or Qubes OS)
|
||||||
|
<br>3.Hypervisor: libvirtd QEMU/KVM (Or Qubes OS's Xen)
|
||||||
|
<br>4.Guest OS: Whonix setup
|
||||||
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
It is highly recommended to use whonix for this setup, because there are always cases that an app might not honor your proxy setting and somehow connects directly. It is always a good idea to put sensitive app behind whonix gateway, so your clearnet ip will never be exposed
|
||||||
|
</p>
|
||||||
|
|
||||||
|
|
||||||
|
<p></p>
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /grey -->
|
||||||
|
|
||||||
|
<!-- +++++ Second Post +++++ -->
|
||||||
|
<div id="anon3">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Initial Setup </b></h2>
|
||||||
|
<p>The first thing to do is to get syncthing to your whonix workstation.</p>
|
||||||
|
<p>For simplicity you can just do</p>
|
||||||
|
<pre><code class="nim">sudo apt-get install syncthing
|
||||||
|
</code></pre>
|
||||||
|
<p>Sometimes apt might not contains the up to date package, then you need to get it from the site</p>
|
||||||
|
<img src="1.png" class="imgRz">
|
||||||
|
|
||||||
|
<p>Next verify the sha256sum according to <a href="https://syncthing.net/security/">https://syncthing.net/security/</a></p>
|
||||||
|
<pre><code class="nim">curl -s https://syncthing.net/release-key.txt | gpg --import
|
||||||
|
</code></pre>
|
||||||
|
|
||||||
|
<p>Check the gpg fingerprint, it should be like this</p>
|
||||||
|
<pre><code class="nim">
|
||||||
|
gpg --fingerprint
|
||||||
|
/home/user/.gnupg/pubring.kbx
|
||||||
|
-----------------------------
|
||||||
|
pub rsa2048/0xD26E6ED000654A3E 2014-12-29 [SC]
|
||||||
|
Key fingerprint = 37C8 4554 E7E0 A261 E4F7 6E1E D26E 6ED0 0065 4A3E
|
||||||
|
uid [ unknown] Syncthing Release Management <release@syncthing.net>
|
||||||
|
sub rsa2048/0x681C3CFCF614F575 2014-12-29 [E]
|
||||||
|
</code></pre>
|
||||||
|
|
||||||
|
<p>Then download verify the checksum file, and check the checksum to see if it matches</p>
|
||||||
|
<pre><code class="nim">
|
||||||
|
$ curl -sLO https://github.com/syncthing/syncthing/releases/download/v1.23.6/sha256sum.txt.asc
|
||||||
|
|
||||||
|
$ gpg --verify sha256sum.txt.asc
|
||||||
|
gpg: Signature made Mo 03 Jul 2023 10:09:30 UTC
|
||||||
|
gpg: using RSA key D26E6ED000654A3E
|
||||||
|
gpg: Good signature from "Syncthing Release Management <release@syncthing.net>"
|
||||||
|
gpg: WARNING: This key is not certified with a trusted signature!
|
||||||
|
gpg: There is no indication that the signature belongs to the owner.
|
||||||
|
|
||||||
|
$ sha256sum -c sha256sum.txt.asc
|
||||||
|
...
|
||||||
|
sha256sum: syncthing-linux-386-v1.23.6.tar.gz: No such file or directory
|
||||||
|
syncthing-linux-386-v1.23.6.tar.gz: FAILED open or read
|
||||||
|
syncthing-linux-amd64-v1.23.6.tar.gz: OK <-- this one
|
||||||
|
sha256sum: syncthing-linux-armv5-v1.23.6.tar.gz: No such file or directory
|
||||||
|
syncthing-linux-armv5-v1.23.6.tar.gz: FAILED open or read
|
||||||
|
...
|
||||||
|
sha256sum: WARNING: 14 lines are improperly formatted
|
||||||
|
sha256sum: WARNING: 35 listed files could not be read
|
||||||
|
</code></pre>
|
||||||
|
|
||||||
|
<p>Next you need to do some changes in the tor browser, so you can access the web panel</p>
|
||||||
|
<p>type about:config inside the address bar, accept the risk and continue</p>
|
||||||
|
<img src="2.png" class="imgRz">
|
||||||
|
<p>search for no_proxies_on in the search bar, and add 127.0.0.1 to it</p>
|
||||||
|
<img src="3.png" class="imgRz">
|
||||||
|
<p>Editing your tor browser is fine if you are just using it to access local syncthing instance, but you should revert the change if you want to access the internet. Changing tor config might bring some unexpected browser fingerprint issue. You should get a separate whonix vm if paranoid.</p>
|
||||||
|
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
<div id="anon2">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Set up syncthing</b></h2> </br> </br>
|
||||||
|
<p>Next decompress the syncthing pack and execute it</p>
|
||||||
|
<pre><code class="nim">
|
||||||
|
$ tar xvf syncthing-linux-amd64-v1.28.0.tar.gz
|
||||||
|
|
||||||
|
$ cd syncthing-linux-amd64-v1.28.0/
|
||||||
|
|
||||||
|
$ ./syncthing
|
||||||
|
</code></pre>
|
||||||
|
|
||||||
|
<p>If you have setup your tor browser correctly it should automatically redirect you to http://127.0.0.1:8384/ and you will see the web panel</p>
|
||||||
|
<p>Next thing to do is to find your client id, it is in the actions menu</p>
|
||||||
|
<img src="4.png" class="imgRz">
|
||||||
|
<p></p>
|
||||||
|
<img src="5.png" class="imgRz">
|
||||||
|
<p>Next exchange this id with people you are sharing file with</p>
|
||||||
|
<p>After that add each other in both clients in the remote device section, if nothing goes wrong you should be able to see each other in the remote device section showed as "connected"</p>
|
||||||
|
<img src="6.png" class="imgRz">
|
||||||
|
<p></p>
|
||||||
|
<img src="7.png" class="imgRz">
|
||||||
|
<p></p>
|
||||||
|
<img src="8.png" class="imgRz">
|
||||||
|
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
|
||||||
|
<!-- +++++ Second Post +++++ -->
|
||||||
|
<div id="anon1">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-8 col-lg-offset-2">
|
||||||
|
<h2><b>Sync files</b></h2> </br> </br>
|
||||||
|
<p>After the previous setup, you can share the file you want</p>
|
||||||
|
<p>Syncthing over tor is really slow! Because if both parties are behind tor, your file will probably goes through a circuit like this: </p>
|
||||||
|
<img src="Syncthing_circuit.jpg" class="imgRz">
|
||||||
|
<p>I personally tried this setup, and it took me 4 hours 30 minutes to send a 10GB file. So be patient when you are sending some large files</p>
|
||||||
|
|
||||||
|
<p>You and your peer will only see the relay server's ip address, unlike the vpn setup which will expose the vpn ip you are using, which you can check here <a href="https://blog.nowhere.moe/opsec/syncthingvpn/index.html">https://blog.nowhere.moe/opsec/syncthingvpn/index.html</a></p>
|
||||||
|
<p>You peer also won't know you are using tor if you do not tell him</p>
|
||||||
|
<img src="remote_node.png" class="imgRz">
|
||||||
|
|
||||||
|
|
||||||
|
<p>Choose add folder to create a new sharing Folder, and choose to share this folder with your peer</p>
|
||||||
|
<img src="9.png" class="imgRz">
|
||||||
|
<p></p>
|
||||||
|
<img src="10.png" class="imgRz">
|
||||||
|
|
||||||
|
<p>If nothing goes wrong, the receiver should see this</p>
|
||||||
|
<img src="11.png" class="imgRz">
|
||||||
|
<p>Agree and add the folder, after that syncthing will automatically transmit the files</p>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div><!-- /row -->
|
||||||
|
</div> <!-- /container -->
|
||||||
|
</div><!-- /white -->
|
||||||
|
|
||||||
|
<!-- +++++ Footer Section +++++ -->
|
||||||
|
|
||||||
|
<div id="anonb">
|
||||||
|
<div class="container">
|
||||||
|
<div class="row">
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>PrismBreaker</h4>
|
||||||
|
<p>
|
||||||
|
Shatter the big brother.</p></br></br><p>Creative Commons Zero: No Rights Reserved</br><img src="\CC0.png">
|
||||||
|
|
||||||
|
</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>My Links</h4>
|
||||||
|
<p>
|
||||||
|
|
||||||
|
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
|
||||||
|
|
||||||
|
</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
<div class="col-lg-4">
|
||||||
|
<h4>About nihilist</h4>
|
||||||
|
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 87iB34vdFvNULrAjyfVAZ7jMXc8vbq9tLGMLjo6WC8N9Xo2JFaa8Vkp6dwXBt8rK12Xpz5z1rTa9jSfgyRbNNjswHKTzFVh</p></br><p><u>Contact:</u> prismbreaker@waifu.club (<a href="https://keys.openpgp.org/vks/v1/by-fingerprint/735816B2B9E6F4660ECE44D983E602C4B6EA6AEE">PGP</a>)</p>
|
||||||
|
</div><!-- /col-lg-4 -->
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<!-- Bootstrap core JavaScript
|
||||||
|
================================================== -->
|
||||||
|
<!-- Placed at the end of the document so the pages load faster -->
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
BIN
opsec/syncthing/remote_node.png
Normal file
BIN
opsec/syncthing/remote_node.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 24 KiB |
Loading…
Reference in New Issue
Block a user