November 12, 2021

SpamLess WriteUp

In this post, I’m going to solve the SpamLess challenge from UUTCTF2021. It is about sending an email without being spam to [email protected] address. The mail server is served as a Tor’s hidden service.

Now the writeup …

The Challenge

I’ve described the needed tools and methods for solving the question in the following video. You can check my previous post about fetching a hidden service’s public key which is needed for solving this challenge.

SpamLess WriteUp – UUTCTF2021

If you have any question, you can reach me by email.

March 23, 2021

Onion Tunnel: Proxy Every TOR Hidden Service on localhost

Onion Tunnel

Onion Tunnel is a simple tunnel app for tunneling every connection through TOR network. It is in my GitHub repository named OnionTunnel: https://github.com/mirsamantajbakhsh/OnionTunnel.

The idea of Onion Tunnel is taken from I2P. It opens a port on localhost for each Hidden Service but TOR does not have such thing. Instead, it opens a SOCKS5 Proxy to tunnel every connection through TOR.

This idea is great but it has a problem:

What if the application that wants to get traffic from TOR, does not support SOCKS5 proxy?

November 22, 2020

TOR Android Library

In previous post, I’ve talked about compiling TOR from source in Android and added some helper libraries for starting and configuring TOR. In this post, I’ve created a library based on Tor Binary (version 0.4.4.0) and published in GitHub, JFrog and JitPack.

September 24, 2020

Compiling TOR in Android

Anonymity Networks

TOR Android Binary

April 27, 2020

Onion Balance v2: Beautiful Load Balancer in TOR

Onion Balance is a Load Balancer in TOR Anonymity Network

August 6, 2019

Creating Hidden Mail Service

Installing and Configure Hidden Mail Service over TOR

Previously, I’ve described how to run hidden mail service over TOR and how to connect to it using ThunderBird.

In this post, I’ve create a video demo of what I’ve told in the posts.

May 9, 2019

OnionFarm WriteUp

OnionFarm was one of the challenges in UUTCTF which was held in 25-28 April 2019 by Urmia University of Technology. The challenge has been solved by 4 teams. Following, the challenge details and the write up is discussed.

April 13, 2019

VPN or TOR? This is the Problem

Anonymity Networks

I just saw a post in TOR stack exchange titled “Is it recommended that we use a VPN along with Tor?” and wanted to post about using VPN and TOR alongside. Previously, I’ve posted Socks Rocks! The Good, The Bad and The Ugly and Socks Rocks Again! and this post is conclusion of the posts.

February 28, 2019

Scooby Tor! Where Are You?

I notified that the exit node IP address in the TOR browser is not the real exit node IP. Then I started to drive the mystery machine for investigating the case. Real IP! Where are you?

February 1, 2019

Connecting to Hidden Mail Server using Android

My Contribution in K9 Android Mail Client

K-9 is an attractive, open-source email client for Android with support of IMAP, POP3, SMTP, and exchange protocols. Hence, this client does not support proxy feature. This problem is referenced in #704 #980 #2619. In this post I will talk about my contribution in K-9 project by adding SOCKs proxy feature, which can be used for connecting hidden mail services.

In previous post, I described about connecting Thunderbird, an open source email client for PC, to a hidden mail service. In this post I will talk about modifying K-9 mail and connecting Android client to the hidden mail service.