mirror of https://github.com/ajvb/awesome-tor.git
Reorganize, make a first pass at awesome-list style guide compliance.
This commit makes massive changes to the list organization. Instead of categorizing the projects as "Tor Project's Projects" or not, mainly, which was one gigantic and growing list of current and outdated projects, the line items are categorized by their purpose or function. The goal is to make the list more useful for someone who is unfamiliar with Tor and wants to know which tool or project is the most relevant to their use case. In addition, this commit adds the following Tor-based tools: * Ricochet, a Tor Onion service-based Jabber messenger. * Whonix, a GNU/Linux distribution that torifies everything by default. * OnionScan, a security tool for alerting on Onion service misconfigs. * Vanguards, an Onion service entry guard attack mitigation script. * tor.rb, a Ruby library for interacting with Tor. This commit further adds a License heading, and edits many list items for conformance with the awesome-list style guide. Namely, this means "a" and "an" prepositions have been dropped, project names are removed from the project line item description, periods are added to the end of line item descriptions, headings are moved to level one, a `CONTRIBUTING.md` file has been added, and so on.
This commit is contained in:
Meitar M
parent
888b5099e3
commit
76b475b14c
|
|
@ -0,0 +1,45 @@
|
|||
# Contribution Guidelines
|
||||
|
||||
**Your pull request should have a useful title. Please carefully read everything in [Adding to this list](#adding-to-this-list).**
|
||||
|
||||
## Table of Contents
|
||||
|
||||
- [Adding to this list](#adding-to-this-list)
|
||||
- [Creating your own awesome list](#creating-your-own-awesome-list)
|
||||
- [Adding something to an awesome list](#adding-something-to-an-awesome-list)
|
||||
- [Updating your Pull Request](#updating-your-pull-request)
|
||||
|
||||
## Adding to this list
|
||||
|
||||
Please ensure your pull request adheres to the following guidelines:
|
||||
|
||||
- Search previous suggestions before making a new one, as yours may be a duplicate.
|
||||
- Make sure the item you are adding is useful (and, you know, awesome) before submitting.
|
||||
- Make an individual pull request for each suggestion.
|
||||
- Use [title-casing](http://titlecapitalization.com) (AP style).
|
||||
- Use the following format: `[Item Name](link)`
|
||||
- Link additions should be added to the bottom of the relevant category.
|
||||
- New categories or improvements to the existing categorization are welcome.
|
||||
- Check your spelling and grammar.
|
||||
- Make sure your text editor is set to remove trailing whitespace.
|
||||
- The pull request and commit should have a useful title.
|
||||
- The body of your commit message should contain a link to the repository.
|
||||
|
||||
Thank you for your suggestions!
|
||||
|
||||
## Adding something to an awesome list
|
||||
|
||||
If you have something awesome to contribute to an awesome list, this is how you do it.
|
||||
|
||||
You'll need a [GitHub account](https://github.com/join)!
|
||||
|
||||
1. Access the awesome list's GitHub page. For example: https://github.com/sindresorhus/awesome
|
||||
2. Click on the `readme.md` file: 
|
||||
3. Now click on the edit icon. 
|
||||
4. You can start editing the text of the file in the in-browser editor. Make sure you follow guidelines above. You can use [GitHub Flavored Markdown](https://help.github.com/articles/github-flavored-markdown/). 
|
||||
5. Say why you're proposing the changes, and then click on "Propose file change". 
|
||||
6. Submit the [pull request](https://help.github.com/articles/using-pull-requests/)!
|
||||
|
||||
## Updating your Pull Request
|
||||
|
||||
Sometimes, a maintainer of this list will ask you to edit your Pull Request before it is included. This is normally due to spelling errors or because your PR didn't match the awesome-* list guidelines. [Here is a write up on how to change a Pull Request](https://github.com/RichardLitt/docs/blob/master/amending-a-commit-guide.md), and the different ways you can do that.
|
||||
25
LICENSE
25
LICENSE
|
|
@ -1,25 +0,0 @@
|
|||
This is free and unencumbered software released into the public domain.
|
||||
|
||||
Anyone is free to copy, modify, publish, use, compile, sell, or
|
||||
distribute this software, either in source code form or as a compiled
|
||||
binary, for any purpose, commercial or non-commercial, and by any
|
||||
means.
|
||||
|
||||
In jurisdictions that recognize copyright laws, the author or authors
|
||||
of this software dedicate any and all copyright interest in the
|
||||
software to the public domain. We make this dedication for the benefit
|
||||
of the public at large and to the detriment of our heirs and
|
||||
successors. We intend this dedication to be an overt act of
|
||||
relinquishment in perpetuity of all present and future rights to this
|
||||
software under copyright law.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
|
||||
IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
|
||||
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
|
||||
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
|
||||
OTHER DEALINGS IN THE SOFTWARE.
|
||||
|
||||
For more information, please refer to <http://unlicense.org>
|
||||
|
||||
205
README.md
205
README.md
|
|
@ -1,113 +1,146 @@
|
|||
# awesome-tor [](https://github.com/sindresorhus/awesome)
|
||||
A curated list of awesome Tor related projects, articles, papers, etc
|
||||
# Awesome Tor [](https://github.com/sindresorhus/awesome)
|
||||
|
||||
> A curated list of awesome software, articles, and other resources related to the Tor project.
|
||||
|
||||
### Contents
|
||||
- [Awesome Tor](#awesome-tor)
|
||||
- [The Tor Project](#the-tor-project)
|
||||
- [Tor Project's Projects](#tor-projects-projects)
|
||||
- [Implementation of the Tor Protocol in Other Languages](#implementation-of-the-tor-protocol-in-other-languages)
|
||||
- [Tools](#tools)
|
||||
- [Hidden Service](#hidden-service)
|
||||
- [Running Hidden Services](#running-hidden-services)
|
||||
- [Relay](#relay)
|
||||
- [Using Tor](#using-tor)
|
||||
- [Resources](#resources)
|
||||
- [Conference Talks](#conference-talks)
|
||||
- [Articles](#articles)
|
||||
- [Websites](#websites)
|
||||
- [Donate](#donate)
|
||||
[Tor](https://torproject.org/) is an anonymizing TCP overlay network proxy implemented as a cryptographic mixnet. It is used for protecting the privacy of user communications in a variety of operational environments. Contributions to this list are heartily encouraged. Please see the [contribution guidelines](CONTRIBUTING.md) for details.
|
||||
|
||||
# Contents
|
||||
|
||||
- [Android-based tools](#android-based-tools)
|
||||
- [Articles](#articles)
|
||||
- [Bridge tools](#bridge-tools)
|
||||
- [Conference presentations and talks](#conference-presentations-and-talks)
|
||||
- [End-user tools](#end-user-tools)
|
||||
- [File sharing](#file-sharing)
|
||||
- [Funding](#funding)
|
||||
- [Messaging](#messaging)
|
||||
- [Onion service tools](#onion-service-tools)
|
||||
- [Operating System distributions](#operating-system-distributions)
|
||||
- [Pluggable transports](#pluggable-transports)
|
||||
- [Relay operator tools](#relay-operator-tools)
|
||||
- [Tor protocol implementations](#tor-protocol-implementations)
|
||||
- [Tor server hardening tools](#tor-server-hardening-tools)
|
||||
- [Tunneling tools](#tunneling-tools)
|
||||
- [Web browser-based tools](#web-browser-based-tools)
|
||||
- [Whistleblowing](#whistleblowing)
|
||||
|
||||
# The Tor Project
|
||||
# Android-based tools
|
||||
|
||||
#### [torproject.org](http://torproject.org/)
|
||||
#### [blog.torproject.org](https://blog.torproject.org/blog/)
|
||||
- [Orbot](https://www.torproject.org/getinvolved/volunteer.html.en#project-orbot) - Provides Tor on the Android platform. The project is under active development, updates to latest Tor releases, and working to stay up to date with all changes in Android and mobile threats.
|
||||
|
||||
## Tor Project's Projects
|
||||
# Articles
|
||||
|
||||
This is a listing directly taken from The Tor Project's [Projects table](https://www.torproject.org/getinvolved/volunteer.html.en#projects) on their Volunteer page.
|
||||
- [Anonbib](https://www.torproject.org/getinvolved/volunteer.html.en#project-anonbib) - List of important papers in the field of anonymity. It's also a set of scripts to generate the website from Latex (bibtex). If we're missing any important papers, please let us know!
|
||||
- [Scaling Tor hidden services](https://www.benthamsgaze.org/2015/11/17/scaling-tor-hidden-services) - Article on scaling Onion services.
|
||||
|
||||
* [Tor](https://www.torproject.org/getinvolved/volunteer.html.en#project-tor) - Central project, providing the core software for using and participating in the Tor network. Numerous people contribute to the project to varying extents, but the chief architects are Nick Mathewson and Roger Dingledine.
|
||||
* [Tor Browser](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbrowser) - Tor Browser is an easy-to-use, portable package of Tor, HTTPS-Everywhere, NoScript, TorLauncher, Torbutton, and a Firefox fork, all preconfigured to work together out of the box. The modified copy of Firefox aims to resolve the privacy and security issues in mainline version.
|
||||
* [HTTPS Everywhere](https://www.torproject.org/getinvolved/volunteer.html.en#project-httpseverywhere) - HTTPS Everywhere is a Firefox and Chrome extension that encrypts your communications with many major websites, making your browsing more secure.
|
||||
* [Arm](https://www.torproject.org/getinvolved/volunteer.html.en#project-arm) -The anonymizing relay monitor (arm) is a terminal status monitor for Tor, intended for command-line aficionados, ssh connections, and anyone with a tty terminal. This works much like top does for system usage, providing real time statistics for bandwidth, resource usage, connections, and quite a bit more.
|
||||
* [Orbot](https://www.torproject.org/getinvolved/volunteer.html.en#project-orbot) - Provides Tor on the Android platform. The project is under active development, updates to latest Tor releases, and working to stay up to date with all changes in Android and mobile threats.
|
||||
* [Tails](https://www.torproject.org/getinvolved/volunteer.html.en#project-tails) - The Amnesic Incognito Live System is a live CD/USB distribution preconfigured so that everything is safely routed through Tor and leaves no trace on the local system. This is a merger of the Amnesia and Incognito projects, and still under very active development.
|
||||
* [tor-ramdisk](https://www.torproject.org/getinvolved/volunteer.html.en#project-torramdisk) - Tor-ramdisk is a uClibc-based micro Linux distribution whose sole purpose is to securely host a Tor server purely in RAM.
|
||||
* [Torsocks](https://www.torproject.org/getinvolved/volunteer.html.en#project-torsocks) - Utility for adapting other applications to work with Tor. Development has slowed and compatibility issues remain with some platforms, but it's otherwise feature complete.
|
||||
* [TorBirdy](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbirdy) - TorBirdy is Torbutton for Thunderbird and related Mozilla mail clients.
|
||||
* [Obfsproxy](https://www.torproject.org/getinvolved/volunteer.html.en#project-obfsproxy) - A proxy that shapes Tor traffic, making it harder for censors to detect and block Tor. This has both a C and python implementation.
|
||||
* [Flash Proxy](https://www.torproject.org/getinvolved/volunteer.html.en#project-flash-proxy) - Pluggable transport using proxies running in web browsers to defeat address-based blocking.
|
||||
* [Shadow](https://www.torproject.org/getinvolved/volunteer.html.en#project-shadow) - Shadow is a discrete-event network simulator that runs the real Tor software as a plug-in. Shadow is open-source software that enables accurate, efficient, controlled, and repeatable Tor experimentation.
|
||||
* [Chutney](https://www.torproject.org/getinvolved/volunteer.html.en#project-chutney) - Integration test suite that spawns a local tor network, checking the interactions of its components.
|
||||
* [Stem](https://www.torproject.org/getinvolved/volunteer.html.en#project-stem) - Python controller library for scripts and controller applications using Tor.
|
||||
* [Txtorcon](https://www.torproject.org/getinvolved/volunteer.html.en#project-txtorcon) - Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction. Used by OONI and APAF.
|
||||
* [Tlsdate](https://www.torproject.org/getinvolved/volunteer.html.en#project-tlsdate) - tlsdate: secure parasitic rdate replacement. tlsdate sets the local clock by securely connecting with TLS to remote servers and extracting the remote time out of the secure handshake. Unlike ntpdate, tlsdate uses TCP, for instance connecting to a remote HTTPS or TLS enabled service, and provides some protection against adversaries that try to feed you malicious time information.
|
||||
* [Metrics](https://www.torproject.org/getinvolved/volunteer.html.en#project-metrics) - Processing and analytics of consensus data, provided to users via the metrics portal. This has been under active development for several years by Karsten Loesing.
|
||||
* [Atlas](https://www.torproject.org/getinvolved/volunteer.html.en#project-atlas) - Atlas is a web application to discover Tor relays and bridges. It provides useful information on how relays are configured along with graphics about their past usage.
|
||||
* [Globe](https://www.torproject.org/getinvolved/volunteer.html.en#project-globe) - Globe is a web application that allows you to search for Tor relays and bridges. It gives you a detailed overview of properties and configurations of a relay or bridge.
|
||||
* [Compass](https://www.torproject.org/getinvolved/volunteer.html.en#project-compass) - Compass is a web and command line application that filters and aggregates the Tor relays based on various attributes.
|
||||
* [Onionoo](https://www.torproject.org/getinvolved/volunteer.html.en#project-onionoo) - Onionoo is a JSON based protocol to learn information about currently running Tor relays and bridges.
|
||||
* [ExitMap](https://www.torproject.org/getinvolved/volunteer.html.en#project-exitmap) - Scanner for the Tor network by Philipp Winter to detect malicious and misconfigured exits.
|
||||
* [DocTor](https://www.torproject.org/getinvolved/volunteer.html.en#project-doctor) - DocTor is a notification service that monitors newly published descriptor information for issues. This is primarily a service to help the tor directory authority operators, but it also checks for a handful of other issues like sybil attacks.
|
||||
* [Weather](https://www.torproject.org/getinvolved/volunteer.html.en#project-weather) - Provides automatic notification to subscribed relay operators when their relay's unreachable
|
||||
* [GetTor](https://www.torproject.org/getinvolved/volunteer.html.en#project-gettor) - E-mail autoresponder providing Tor's packages over SMTP. This has been relatively unchanged for quite a while.
|
||||
* [TorCheck](https://www.torproject.org/getinvolved/volunteer.html.en#project-torcheck) - Site for determining if the visitor is using Tor or not.
|
||||
* [BridgeDB](https://www.torproject.org/getinvolved/volunteer.html.en#project-bridgedb) - Backend bridge distributor, handling the various pools they're distributed in. This was actively developed until Fall of 2010.
|
||||
* [Ooni Probe](https://www.torproject.org/getinvolved/volunteer.html.en#project-ooni) - Censorship scanner, checking your local connection for blocked or modified content.
|
||||
* [TorPS](https://www.torproject.org/getinvolved/volunteer.html.en#project-torps) - The Tor Path Simulator (TorPS) is a tool for efficiently simulating path selection in Tor. It chooses circuits and assigns user streams to those circuits in the same way that Tor does. TorPS is fast enough to perform thousands of simulations over periods of months.
|
||||
* [TorFlow](https://www.torproject.org/getinvolved/volunteer.html.en#project-torflow) - Library and collection of services for actively monitoring the Tor network. These include the Bandwidth Scanners (measuring throughput of relays) and SoaT (scans for malicious or misconfigured exit nodes).
|
||||
* [TorBEL](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbel) - The Tor Bulk Exitlist provides a method of identifying if IPs belong to exit nodes or not. This is a replacement for TorDNSEL which is a stable (though unmaintained) Haskell application for this purpose. The initial version of TorBEL was started in GSOC 2010 but since then the project has been inactive.
|
||||
* [Tor2web](https://www.torproject.org/getinvolved/volunteer.html.en#project-tor2web) - Tor2web allows Internet users to browse websites running in Tor hidden services. It trades user anonymity for usability by allowing anonymous content to be distributed to non-anonymous users.
|
||||
* [Anonbib](https://www.torproject.org/getinvolved/volunteer.html.en#project-anonbib) - Anonbib is a list of important papers in the field of anonymity. It's also a set of scripts to generate the website from Latex (bibtex). If we're missing any important papers, please let us know!
|
||||
# Bridge tools
|
||||
|
||||
# Implementation of the Tor Protocol in Other Languages
|
||||
- [BridgeDB](https://www.torproject.org/getinvolved/volunteer.html.en#project-bridgedb) - Backend bridge distributor, handling the various pools they're distributed in. This was actively developed until Fall of 2010.
|
||||
|
||||
* [haskell-tor](https://github.com/GaloisInc/haskell-tor) - A Haskell implementation of the Tor protocol.
|
||||
* [node-Tor](https://github.com/Ayms/node-Tor) - Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router).
|
||||
# Conference presentations and talks
|
||||
|
||||
# Tools
|
||||
- [How Tor Users Got Caught - Defcon 22](https://www.youtube.com/watch?v=7G1LjQSYM5Q) - 4 examples of people who have used Tor for illegal activities and how they were caught. Multiple de-anonymization attacks are shown at the end of the video.
|
||||
- [How governments have tried to block Tor - 2011](https://www.youtube.com/watch?v=GwMr8Xl7JMQ) - (*Oldy but goody*) Iran blocked Tor handshakes using Deep Packet Inspection (DPI) in January 2011 and September 2011. Bluecoat tested out a Tor handshake filter in Syria in June 2011. China has been harvesting and blocking IP addresses for both public Tor relays and private Tor bridges for years. Roger Dingledine and Jacob Appelbaum will talk about how exactly these governments are doing the blocking, both in terms of what signatures they filter in Tor (and how we've gotten around the blocking in each case), and what technologies they use to deploy the filters -- including the use of Western technology to operate the surveillance and censorship infrastructure in Tunisia (Smartfilter), Syria (Bluecoat), and other countries.
|
||||
- [State Of The Onion - 2014](https://www.youtube.com/watch?v=fOwYgAS4TXE) - The State of the Onion covers technical, social, economic, political and cultural issues pertaining to anonymity, the Tor Project and the ecosystem surrounding our communities.
|
||||
- [The Tor Network - 2013](https://www.youtube.com/watch?v=CJNxbpbHA-I) - Roger Dingledine and Jacob Appelbaum will discuss contemporary Tor Network issues related to censorship, security, privacy and anonymity online.
|
||||
- [Tor: Hidden Services and Deanonymisation - 2014](https://www.youtube.com/watch?v=oZdeRmlj8Gw) - This talk presents the results from what we believe to be one of the largest studies into Tor Hidden Services (The Darknet) to date.
|
||||
|
||||
## Hidden Service
|
||||
# End-user tools
|
||||
|
||||
### Running Hidden Services
|
||||
- [GetTor](https://www.torproject.org/getinvolved/volunteer.html.en#project-gettor) - E-mail autoresponder providing Tor's packages over SMTP. This has been relatively unchanged for quite a while.
|
||||
- [Globe](https://www.torproject.org/getinvolved/volunteer.html.en#project-globe) - Globe is a web application that allows you to search for Tor relays and bridges, providing a detailed overview of properties and configurations of a relay or bridge.
|
||||
- [Ooni Probe](https://www.torproject.org/getinvolved/volunteer.html.en#project-ooni) - Censorship scanner, checking your local connection for blocked or modified content.
|
||||
- [Tor2web](https://www.torproject.org/getinvolved/volunteer.html.en#project-tor2web) - Allows Internet users to browse websites running in Tor hidden services. It trades user anonymity for usability by allowing anonymous content to be distributed to non-anonymous users.
|
||||
- [TorBirdy](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbirdy) - TorBirdy is Torbutton for Thunderbird and related Mozilla mail clients.
|
||||
- [TorCheck](https://www.torproject.org/getinvolved/volunteer.html.en#project-torcheck) - Site for determining if the visitor is using Tor or not.
|
||||
|
||||
* [OnionBalance](https://github.com/DonnchaC/onionbalance) - Load-balancing and redundancy for Tor hidden services
|
||||
* [Stormy](https://github.com/glamrock/stormy) - Easy creation of Tor Hidden Services (Stormy is currently under heavy development, and only usable by developers.)
|
||||
# File sharing
|
||||
|
||||
## Relay
|
||||
* [tor-relay-bootstrap](https://github.com/micahflee/tor-relay-bootstrap) - Script to bootstrap a debian server to be a set-and-forget Tor relay
|
||||
* [ansible-relayor](https://github.com/nusenu/ansible-relayor) - An Ansible role for Tor Relay Operators
|
||||
* [tor_box](https://github.com/CMoncur/tor_box) - An all-inclusive Tor configuration for Raspberry Pi, serves as both a relay and personal Tor network
|
||||
- [OnionShare](https://onionshare.org/) - OnionShare is an open source tool that lets you securely and anonymously share a file of any size.
|
||||
|
||||
# Funding
|
||||
|
||||
## Using Tor
|
||||
- [OnionTip](https://github.com/DonnchaC/oniontip) - Web app which parses Tor relay data to allow users to tip volunteers in cryptocurrency for running relay(s) in a fair and open way.
|
||||
|
||||
* [TorChat](https://github.com/prof7bit/TorChat) - Decentralized anonymous instant messenger on top of Tor Hidden Services.
|
||||
* [TorChat-Mac](https://github.com/javerous/TorChat-Mac) - Mac OS X native TorChat client
|
||||
* [SecureDrop](https://github.com/freedomofpress/securedrop) - SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by Freedom of the Press Foundation.
|
||||
* [OnionShare](https://onionshare.org/) - OnionShare is an open source tool that lets you securely and anonymously share a file of any size.
|
||||
# Messaging
|
||||
|
||||
- [Briar](https://briarproject.org/) - Peer-to-peer encrypted messaging and forums over various transports, including Bluetooth, clearnet Wi-Fi, or the Tor network.
|
||||
- [Ricochet](https://ricochet.im/) - Jabber-based client that creates an Onion service used to rendezvous with your contacts without revealing your location or IP address.
|
||||
- [TorChat-Mac](https://github.com/javerous/TorChat-Mac) - Mac OS X native TorChat client.
|
||||
- [TorChat](https://github.com/prof7bit/TorChat) - Decentralized anonymous instant messenger on top of Tor Hidden Services.
|
||||
|
||||
# Resources
|
||||
# Onion service tools
|
||||
|
||||
## Conference Talks
|
||||
- [OnionBalance](https://github.com/DonnchaC/onionbalance) - Load-balancing and redundancy for Tor hidden services.
|
||||
- [Stormy](https://github.com/glamrock/stormy) - Easy creation of Tor Onion services ("Location-Hidden Services"), currently under heavy development.
|
||||
- [Vanguards](https://github.com/mikeperry-tor/vanguards) - Version 3 Onion service guard discovery attack mitigation script (intended for eventual inclusion in Tor core).
|
||||
|
||||
* [State Of The Onion - 2014](https://www.youtube.com/watch?v=fOwYgAS4TXE) - The State of the Onion covers technical, social, economic, political and cultural issues pertaining to anonymity, the Tor Project and the ecosystem surrounding our communities.
|
||||
* [Tor: Hidden Services and Deanonymisation - 2014](https://www.youtube.com/watch?v=oZdeRmlj8Gw) - This talk presents the results from what we believe to be one of the largest studies into Tor Hidden Services (The Darknet) to date.
|
||||
* [The Tor Network - 2013](https://www.youtube.com/watch?v=CJNxbpbHA-I) - Roger Dingledine and Jacob Appelbaum will discuss contemporary Tor Network issues related to censorship, security, privacy and anonymity online.
|
||||
* [How governments have tried to block Tor - 2011](https://www.youtube.com/watch?v=GwMr8Xl7JMQ) - (*Oldy but goody*) Iran blocked Tor handshakes using Deep Packet Inspection (DPI) in January 2011 and September 2011. Bluecoat tested out a Tor handshake filter in Syria in June 2011. China has been harvesting and blocking IP addresses for both public Tor relays and private Tor bridges for years. Roger Dingledine and Jacob Appelbaum will talk about how exactly these governments are doing the blocking, both in terms of what signatures they filter in Tor (and how we've gotten around the blocking in each case), and what technologies they use to deploy the filters -- including the use of Western technology to operate the surveillance and censorship infrastructure in Tunisia (Smartfilter), Syria (Bluecoat), and other countries.
|
||||
* [How Tor Users Got Caught - Defcon 22](https://www.youtube.com/watch?v=7G1LjQSYM5Q) - 4 examples of people who have used Tor for illegal activities and how they were caught. Multiple de-anonymization attacks are shown at the end of the video.
|
||||
# Operating System distributions
|
||||
|
||||
## Articles
|
||||
* [Scaling Tor hidden services](https://www.benthamsgaze.org/2015/11/17/scaling-tor-hidden-services)
|
||||
- [The Amnesic Incognito Live System (TAILS)](https://www.torproject.org/getinvolved/volunteer.html.en#project-tails) - Live CD/USB distribution preconfigured so that everything is safely routed through Tor and leaves no trace on the local system.
|
||||
- [Whonix](https://whonix.org/) - Desktop operating system that can be run in various configurations, which routes the entire user's desktop environment and OS through Tor.
|
||||
- [tor-ramdisk](https://www.torproject.org/getinvolved/volunteer.html.en#project-torramdisk) - uClibc-based micro Linux distribution whose sole purpose is to securely host a Tor server purely in RAM.
|
||||
|
||||
## Websites
|
||||
* [torproject.org](http://torproject.org/)
|
||||
* [blog.torproject.org](https://blog.torproject.org/blog/)
|
||||
# Pluggable transports
|
||||
|
||||
# Donate
|
||||
- [Flash Proxy](https://www.torproject.org/getinvolved/volunteer.html.en#project-flash-proxy) - Pluggable transport using proxies running in Web browsers to defeat address-based blocking.
|
||||
- [Obfsproxy](https://www.torproject.org/getinvolved/volunteer.html.en#project-obfsproxy) - Obfuscating proxy that shapes Tor traffic, making it harder for censors to detect and block Tor, with implementations in C and Python.
|
||||
|
||||
* [Oniontip](https://oniontip.com) - Donate to volunteers who are running Tor relays using Bitcoin.
|
||||
# Relay operator tools
|
||||
|
||||
- [Anonymizing Relay Monitor (Arm)](https://www.torproject.org/getinvolved/volunteer.html.en#project-arm) - `top`-like terminal status monitor for Tor, intended for command-line aficionados, SSH connections, and anyone with a TTY terminal.
|
||||
- [Weather](https://www.torproject.org/getinvolved/volunteer.html.en#project-weather) - Provides automatic notification to subscribed relay operators when their relay's unreachable
|
||||
- [ansible-relayor](https://github.com/nusenu/ansible-relayor) - An Ansible role for Tor Relay Operators.
|
||||
- [tor-relay-bootstrap](https://github.com/micahflee/tor-relay-bootstrap) - Script to bootstrap a Debian server to be a set-and-forget Tor relay.
|
||||
- [tor_box](https://github.com/CMoncur/tor_box) - An all-inclusive Tor configuration for Raspberry Pi, serves as both a relay and personal Tor network
|
||||
|
||||
# Tor server hardening tools
|
||||
|
||||
- [Tlsdate](https://www.torproject.org/getinvolved/volunteer.html.en#project-tlsdate) - Secure parasitic rdate replacement sets the local clock by securely connecting with TLS to remote servers and extracting the remote time out of the secure handshake.
|
||||
|
||||
# Tor controller interfaces
|
||||
|
||||
- [PHP TorControl](https://github.com/dunglas/php-torcontrol) - PHP library to control a Tor server.
|
||||
- [Stem](https://www.torproject.org/getinvolved/volunteer.html.en#project-stem) - TorProject's official Python controller library for scripts and controller applications using Tor.
|
||||
- [tor.rb](https://github.com/dryruby/tor.rb) - Ruby library for interacting with the Tor anonymity network.
|
||||
- [txtorcon](https://txtorcon.readthedocs.io/) - TorProject's official implementation of the control-spec for Tor using the Twisted networking library for Python (supports Py2, PyPy and Py3).
|
||||
|
||||
# Web browser-based tools
|
||||
|
||||
- [HTTPS Everywhere](https://www.torproject.org/getinvolved/volunteer.html.en#project-httpseverywhere) - Firefox and Chrome extension that automatically switches to HTTPS connections with many major websites if those are available.
|
||||
- [Tor Browser](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbrowser) - Easy-to-use, portable package of Tor, HTTPS-Everywhere, NoScript, TorLauncher, Torbutton, and a Firefox fork, all preconfigured to work together out of the box.
|
||||
|
||||
# Development and research tools
|
||||
|
||||
- [Atlas](https://www.torproject.org/getinvolved/volunteer.html.en#project-atlas) - Atlas is a web application to discover Tor relays and bridges. It provides useful information on how relays are configured along with graphics about their past usage.
|
||||
- [Chutney](https://www.torproject.org/getinvolved/volunteer.html.en#project-chutney) - Integration test suite that spawns a local tor network, checking the interactions of its components.
|
||||
- [Compass](https://www.torproject.org/getinvolved/volunteer.html.en#project-compass) - Compass is a web and command line application that filters and aggregates the Tor relays based on various attributes.
|
||||
- [DocTor](https://www.torproject.org/getinvolved/volunteer.html.en#project-doctor) - DocTor is a notification service that monitors newly published descriptor information for issues. This is primarily a service to help the tor directory authority operators, but it also checks for a handful of other issues like sybil attacks.
|
||||
- [ExitMap](https://www.torproject.org/getinvolved/volunteer.html.en#project-exitmap) - Scanner for the Tor network by Philipp Winter to detect malicious and misconfigured exits.
|
||||
- [Metrics](https://www.torproject.org/getinvolved/volunteer.html.en#project-metrics) - Processing and analytics of consensus data, provided to users via the metrics portal. This has been under active development for several years by Karsten Loesing.
|
||||
- [OnionScan](https://onionscan.org/) - Help operators of Onion services find and fix operational security issues with their location-hidden services.
|
||||
- [Onionoo](https://www.torproject.org/getinvolved/volunteer.html.en#project-onionoo) - Onionoo is a JSON based protocol to learn information about currently running Tor relays and bridges.
|
||||
- [Shadow](https://www.torproject.org/getinvolved/volunteer.html.en#project-shadow) - Shadow is a discrete-event network simulator that runs the real Tor software as a plug-in. Shadow is open-source software that enables accurate, efficient, controlled, and repeatable Tor experimentation.
|
||||
- [TorBEL](https://www.torproject.org/getinvolved/volunteer.html.en#project-torbel) - The Tor Bulk Exitlist provides a method of identifying if IPs belong to exit nodes or not. This is a replacement for TorDNSEL which is a stable (though unmaintained) Haskell application for this purpose. The initial version of TorBEL was started in GSOC 2010 but since then the project has been inactive.
|
||||
- [TorFlow](https://www.torproject.org/getinvolved/volunteer.html.en#project-torflow) - Library and collection of services for actively monitoring the Tor network. These include the Bandwidth Scanners (measuring throughput of relays) and SoaT (scans for malicious or misconfigured exit nodes).
|
||||
- [TorPS](https://www.torproject.org/getinvolved/volunteer.html.en#project-torps) - The Tor Path Simulator (TorPS) is a tool for efficiently simulating path selection in Tor. It chooses circuits and assigns user streams to those circuits in the same way that Tor does. TorPS is fast enough to perform thousands of simulations over periods of months.
|
||||
|
||||
# Tor protocol implementations
|
||||
|
||||
- [haskell-tor](https://github.com/GaloisInc/haskell-tor) - Haskell implementation of the Tor protocol.
|
||||
- [node-Tor](https://github.com/Ayms/node-Tor) - Javascript implementation of the Tor (or Tor like) anonymizer project.
|
||||
|
||||
# Tunneling tools
|
||||
|
||||
- [Torsocks](https://www.torproject.org/getinvolved/volunteer.html.en#project-torsocks) - Utility for adapting other applications to work with Tor.
|
||||
|
||||
# Whistleblowing
|
||||
|
||||
- [GlobaLeaks](https://www.globaleaks.org/) - Free software intended to enable secure and anonymous whistleblowing initiatives.
|
||||
- [SecureDrop](https://github.com/freedomofpress/securedrop) - SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources.
|
||||
|
||||
# License
|
||||
|
||||
[](https://creativecommons.org/licenses/by/4.0/)
|
||||
|
||||
This work is licensed under a [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/).
|
||||
|
|
|
|||
Loading…
Reference in New Issue