A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn,...
Transcript of A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn,...
![Page 1: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/1.jpg)
![Page 2: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/2.jpg)
A Guided Tour of the Internet Ghetto
The Business Value of Tor Hidden Services
Brent Huston “Internet Ghetto Tour Guide” & Does Some Threat Stuff Guy… @lbhuston
![Page 3: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/3.jpg)
Caveats!• Not your average ISSA talk
[NSFW]
• Mentions of porn, violence, drugs & illicit activities
• NO - I will NOT be showing actual porn…
• If you are offended by the subject matter - bye!
• No harm, no foul…
• Don’t try this at home, or suffer the consequences…
![Page 4: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/4.jpg)
What is this Tor thing in 90 seconds?
![Page 5: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/5.jpg)
Whats a Tor Hidden Service?• Uses the Tor bouncing hosts as a
“maze” - except everything is in motion…
• Zooko’s conjecture: out of Decentralized, Secure, and Human-Meaningful, you can achieve at most 2…
• XYZ.onion <- Like DNS on Snow Crash…
• http://3g2upl4pq6kufc4m.onion/ = Duck Duck Go Search Engine
• Rendezvous points & PKI make the date
• Client & server meet covertly, without knowledge of each other’s real location…
![Page 6: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/6.jpg)
No, Brent, I need deep technical deets…
http://bit.ly/1nIZZxNhttps://www.torproject.org/docs/hidden-services.html.en
![Page 7: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/7.jpg)
Caution on being anonymous…
![Page 8: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/8.jpg)
Not all anonymity is created equal…
• Data can still leak in a variety of ways
• NOT a replacement for operational security
• Use Tor Browser Bundle and/or specific OS’s - Tails, etc.
• Warning: trojans, exploits, sting ops & a variety of other techniques can slice the onion & leave you crying…
![Page 9: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/9.jpg)
Welcome to the ghetto…** Last warning **!
Mature Content Ahead!
![Page 10: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/10.jpg)
The train station…• Lists, wiki’s and search engines of
hidden nodes
• http://kpvz7ki2v5agwt35.onion/ - Hidden wiki (the sage…)
• http://xmh57jrzrnw6insl.onion/ - Torch
• http://dppmfxaacucguzpc.onion/ - TorDir
• http://e266al32vpuorbyg.onion - Dark Nexus
![Page 11: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/11.jpg)
Walking “The Street”…• Stores - what can you buy?
• drugs, weapons, porn, fraud gear, data, property, cars, people, fake IDs, exploits, malware…etc…
• Clubs - what’s in there?
• conspiracy theories, crypto, hackers, social & idealogical forums, tribal meetings, pastebins, etc.
• Houses - who lives here?
• IRC, wrapped messaging apps, TOR web mail services, personal pages, etc.
![Page 12: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/12.jpg)
Inside the “Black Sun”• Web of trust, very similar to
old days of BBS culture & piracy…
• Reputation & relationship is key to access
• Access brings extended services
• Murder for hire, custom porn, special gear, search services, more code, etc.
![Page 13: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/13.jpg)
Yen & Kongbucks…• 3 ways to pay…
• Trade/barter -> Be VERY Careful… (Not Likely Anon)
• Bitcoin & cryptocurrencies
• Gift cards
• Sheeple: credit cards… Yep… some do… :-o
![Page 14: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/14.jpg)
Business Value• Start with the search engines…
• Company name, project names, product names…
• Watch for operations targeting your vertical…
• Check out traditional web sites (phishing, spears, etc.) with a Tails Live CD/VM - leverage TOR
• Research that you don’t want tied back to your company…
![Page 15: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/15.jpg)
Where’s the exit?• Tor hidden services are growing
& expected to continue
• Blind spot for most organizations & MANY infosec ppl
• In time, the dark side will likely yield to new emerging markets, be prepared for the future…
• At the very least, know how the dark side of the Internet works, ignore it at your own peril…
![Page 16: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/16.jpg)
Be a “Hiro Protagonist”…• Tor site: torproject.org
• Tor Wikipedia: en.wikipedia.org/wiki/Tor_(anonymity_network)
• EFF has a lot of materials
• Twitter #tor is very active
• @lbhuston
![Page 17: A Guided Tour of the · Caveats! • Not your average ISSA talk [NSFW] • Mentions of porn, violence, drugs & illicit activities • NO - I will NOT be showing actual porn… •](https://reader033.fdocuments.net/reader033/viewer/2022050500/5f934fc09b4cd81ce24c6ccf/html5/thumbnails/17.jpg)
Thanks for hanging…