summaryrefslogtreecommitdiffstats
path: root/tutorials/tor/how-to-host-a-tor-hidden-service.html
blob: de381e5327b62fbdc18d18319493a6f755ff98ec (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
<!DOCTYPE html>
<html lang="" xml:lang="" xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta charset="utf-8"/>
<meta content="pandoc" name="generator"/>
<meta content="width=device-width, initial-scale=1.0, user-scalable=yes" name="viewport"/>
<title>how-to-host-a-tor-hidden-service</title>
<style>
    html {
      line-height: 1.5;
      font-family: Georgia, serif;
      font-size: 20px;
      color: #1a1a1a;
      background-color: #fdfdfd;
    }
    body {
      margin: 0 auto;
      max-width: 36em;
      padding-left: 50px;
      padding-right: 50px;
      padding-top: 50px;
      padding-bottom: 50px;
      hyphens: auto;
      overflow-wrap: break-word;
      text-rendering: optimizeLegibility;
      font-kerning: normal;
    }
    @media (max-width: 600px) {
      body {
        font-size: 0.9em;
        padding: 1em;
      }
      h1 {
        font-size: 1.8em;
      }
    }
    @media print {
      body {
        background-color: transparent;
        color: black;
        font-size: 12pt;
      }
      p, h2, h3 {
        orphans: 3;
        widows: 3;
      }
      h2, h3, h4 {
        page-break-after: avoid;
      }
    }
    p {
      margin: 1em 0;
    }
    a {
      color: #1a1a1a;
    }
    a:visited {
      color: #1a1a1a;
    }
    img {
      max-width: 100%;
    }
    h1, h2, h3, h4, h5, h6 {
      margin-top: 1.4em;
    }
    h5, h6 {
      font-size: 1em;
      font-style: italic;
    }
    h6 {
      font-weight: normal;
    }
    ol, ul {
      padding-left: 1.7em;
      margin-top: 1em;
    }
    li > ol, li > ul {
      margin-top: 0;
    }
    blockquote {
      margin: 1em 0 1em 1.7em;
      padding-left: 1em;
      border-left: 2px solid #e6e6e6;
      color: #606060;
    }
    code {
      font-family: Menlo, Monaco, 'Lucida Console', Consolas, monospace;
      font-size: 85%;
      margin: 0;
    }
    pre {
      margin: 1em 0;
      overflow: auto;
    }
    pre code {
      padding: 0;
      overflow: visible;
      overflow-wrap: normal;
    }
    .sourceCode {
     background-color: transparent;
     overflow: visible;
    }
    hr {
      background-color: #1a1a1a;
      border: none;
      height: 1px;
      margin: 1em 0;
    }
    table {
      margin: 1em 0;
      border-collapse: collapse;
      width: 100%;
      overflow-x: auto;
      display: block;
      font-variant-numeric: lining-nums tabular-nums;
    }
    table caption {
      margin-bottom: 0.75em;
    }
    tbody {
      margin-top: 0.5em;
      border-top: 1px solid #1a1a1a;
      border-bottom: 1px solid #1a1a1a;
    }
    th {
      border-top: 1px solid #1a1a1a;
      padding: 0.25em 0.5em 0.25em 0.5em;
    }
    td {
      padding: 0.125em 0.5em 0.25em 0.5em;
    }
    header {
      margin-bottom: 4em;
      text-align: center;
    }
    #TOC li {
      list-style: none;
    }
    #TOC ul {
      padding-left: 1.3em;
    }
    #TOC > ul {
      padding-left: 0;
    }
    #TOC a:not(:hover) {
      text-decoration: none;
    }
    code{white-space: pre-wrap;}
    span.smallcaps{font-variant: small-caps;}
    span.underline{text-decoration: underline;}
    div.column{display: inline-block; vertical-align: top; width: 50%;}
    div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
    ul.task-list{list-style: none;}
    .display.math{display: block; text-align: center; margin: 0.5rem auto;}
  </style>
</head>
<body>
<nav id="TOC" role="doc-toc">
<h2 id="toc-title">Contents</h2>
<ul>
<li><a href="#how-to-spin-up-a-temporary-hidden-file-share-with-python" target="_self">How to
spin up a temporary hidden file share with Python</a>
<ul>
<li><a href="#configure-tor" target="_self">Configure Tor</a></li>
<li><a href="#set-up-the-server" target="_self">Set up the server</a></li>
</ul></li>
</ul>
</nav>
<p>This might sound spooky and complicated, but it's really not. If you
want to host a small site or a small file share among friends, I
honestly think Tor is one of the easiest and safest options to set
up.</p>
<p>Getting a Tor hidden service running is so stupidly easy that it
hardly deserves it's own article. Tor's website has a great guide right
<a href="https://community.torproject.org/onion-services/setup/">here</a>.
I figured I'd put my own spin on it by showing you show to host a
temporary server to share some files with your friends. Please note the
word <em>temporary</em> in that last sentence; running this way for a
while is insecure and not a good idea. For a permanent solution, you'll
want to host a real web server as explained <a href="/tutorials/www/how-to-make-this-site.html">here</a>.</p>
<p>Like that article, I will only explain how to do this on Linux since
it's way easier and, to be honest, I've never tried to do it on Windows.
If you've never used Linux before, buy a Raspberry Pi and follow the
basic install guide. If you're strapped for cash, run it in a virtual
machine, or use <a href="https://docs.microsoft.com/en-us/windows/wsl/install">Windows
Subsystem for Linux</a>.</p>
<h2 id="how-to-spin-up-a-temporary-hidden-file-share-with-python">How to
spin up a temporary hidden file share with Python</h2>
<p>Once you have Debian/Ubuntu/whatever installed and it's updated to
your liking, you can install Tor with:</p>
<pre><code>$ sudo apt install tor</code></pre>
<p>Start (or stop) Tor with:</p>
<pre><code>$ sudo service tor start</code></pre>
<p>or</p>
<pre><code>$ sudo systemctl start tor.service</code></pre>
<p>You may need to enable the service first. I think this is done by
default now, but it doesn't hurt:</p>
<pre><code>$ sudo systemctl enable tor.service</code></pre>
<h3 id="configure-tor">Configure Tor</h3>
<p>You'll need to edit the file "/etc/tor/torrc" before your service can
be available over Tor. Use vim, nano, or whatever you like to edit the
file (as root!) and search for the following lines:</p>
<pre><code>#HiddenServiceDir /var/lib/tor/hidden_service/
#HiddenServicePort 80 127.0.0.1:80</code></pre>
<p>Remove the '#' at the beginning of each and change the port to 8000
like so:</p>
<pre><code>HiddenServiceDir /var/lib/tor/hidden_service/
HiddenServicePort 80 127.0.0.1:8000</code></pre>
<p>Save and restart Tor for the changes to apply:</p>
<pre><code>$ sudo service tor restart</code></pre>
<p>Once you do this, you'll get a new onion address located in the
directory noted above. Use cat to read the hostname file and copy it
down somewhere. This is your ".onion" address:</p>
<pre><code>$ cat /var/lib/tor/hidden_service/hostname</code></pre>
<h3 id="set-up-the-server">Set up the server</h3>
<p>Make some directory to hold your files.</p>
<pre><code>$ mkdir -pv ~/files</code></pre>
<p>If you're on WSL you can copy files from your C drive like so:</p>
<pre><code>$ cp -vr /mnt/c/Users/username/Desktop/cats ~/files/</code></pre>
<p>On a remote server (like a Raspberry pi) you can use scp instead
(replace 'rapsberry' with the hostname or local IP of you Pi):</p>
<pre><code>$ scp -vr cats pi@raspberry:~/files/</code></pre>
<p>Since we're only doing this temporarily, we don't care too much about
security or where the files should go, but if you want to be careful,
you can issue the following to set the directory to read only after you
copy your files in:</p>
<pre><code>$ chmod -R 644 files</code></pre>
<p>Change into the directory and run Python's built-in http server:</p>
<pre><code>$ cd files
$ python3 -m http.server</code></pre>
<p>You'll see the server is being hosted on port 8000, which is what we
chose in the config file earlier. Just leave it running, or send it to
the background with Ctrl+Z and run "bg".</p>
<p>And that's it! You are now the proud owner of a tor hidden service.
Take the hostname you copied down before and add ".onion" to the end and
give it to your friends so they can browse the files in the directory
through the Tor Browser.</p>
<p>Be sure to watch the program log though... lest they get up to no
good.</p>
</body>
</html>