Login Register






Thread Rating:
  • 0 Vote(s) - 0 Average


Tutorial tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) filter_list
Author
Message
tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #1
Hi i am going to detail how i made an advanced tor to openvpn connection.
you will have to live with my English soz Smile lol



Firstly!
This does not connect you through tor to the internet!
This connects you to a VPN server through TOR
Thus hiding at your isp end where you are connecting to and the vpn server end where you are connecting from.

For the vpn server I am using a vps that could easily be hired for bitcoins.
I am using this quick script to configure the vpn host

(firstly get the script)
Code:
git clone https://github.com/Nyr/openvpn-install.git
cd openvpn-install
(now run the script)
Code:
sudo openvpn-install.sh
now run the script again and follow the promps for a new client
download the client file to your desktop.
download advor advanced (http://sourceforge.net/projects/advtor/files/)





Now use notpad to open the client.OVPN file and add 'socks-proxy localhost 9050' and change the proto to tcp
#####
Code:
Example:
client
dev tun
proto tcp
socks-proxy localhost 9050
~cut~
#####


Now go into your root shell and and edit the openvpn server to use tcp
Code:
cd /etc/openvpn/
vim server.conf
#####
Code:
Example:
port 1194
proto tcp
dev tun
~cut~
#####

This should be enough for a normal tor to vpn connection, right click on the config and you will connect through tor to the server...

but this is an advanced connection...0.o

now..
rather that use tor.exe i am using AdvOr (advanced Onion Router)
go to sourceforge and grab a copy!
sourceforge.net/projects/advtor/files/

i made a batch file to load the config script that went as follows:
"C:\Program Files\OpenVPN\bin\openvpn.exe" --pause-exit --config "C:\Users\Num5kull\Desktop\num5kullvpn.ovpn"
save it as anyfile with the brackets "num5kullvpn.bat"
I then made the batch file into an exe using bat to exe converter from f2ko.de creating
num5kullvpn.exe

now load up AdvOr! and check out all the settings!

you could change to a new endpoint every 10 mins
guarantee burst bandwidth throughout your tunnels
or activate the evil node blacklists.

Now to load the VPN!

In the bottom left corner is a target icon attached to the right of it is a drop down menu.
Click it and select 'Intercept new program'
now select the num5kullvpn.exe and select OPEN

Patients......

eventually the vpn will connect Biggrin

you now have an anon connection to your server!


is it working?:
you can check the network activity in the AdvOr client OR network tab.

Hope this was usefull!
Enjoy the Internet!
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

[+] 2 users Like Num5kull's post
Reply

RE: tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #2
Nice, someone here knows what they're doing. People don't realize that connecting to Tor through a VPN actually makes you less rather than more anonymous, defeating the purpose of using Tor in the first place. This applies to people running their own VPN too considering most hosts store logs on anything that comes and goes into their VPSs, meaning making your own VPN doesn't make you 100% safe.

It's also worth mentioning that this will make your connections a LOT slower.

[+] 1 user Likes meow's post
Reply

RE: tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #3
Thanks meow
i had been thinking of a OpSec webinar i watched a few months back with some russian dood pedaling his customized routers with built in tor nodes .

This is more for the first hop and plausible deniability (no one can say you were connected to THAT server, only that you were online and using tor.)
from the server you could proxychain or tor out to any number or places
for better anonymity the end point would need to be disposable and your OS collard too (wouldn't want windows 10 spamming your computer credentials over MSspynet through this setup).

Many other factors would contribute to fingerprinting your os and find who your are through a vpn such as: hostname, satori ttl fingerprinting , cross contamination of accounts you are using


This was just a network test, that could be part of a bigger picture.
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

Reply

RE: tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #4
I have been testing it for a few hours, yes it is slow i have to admit but because of the frequency in change of tunnels i get a top connection speed ( about half a meg a second) .
i have a very dynamic setup of the tunnels and endpoints in the AdvOr config it could be that not a lot of bandwidth this used before someone elses node starts being utilised; perhaps on a system that i have not run hit the quota on.
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

Reply

RE: tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #5
almost at 500 views, and is now one of the top read tuits on this part of the forum, if anyone want to give me some more rep for this. that would be great
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

[+] 1 user Likes Num5kull's post
Reply

RE: tor to vpn safe, vpn to tor goto jail (advanced openvpn setup) #6
update:
thanks for the message
I went to reply but ended up putting it here instead

yes advor from sourceforge is not working any more, i have had to update it myself recently.
I think the dir host list is out of date getting loads of 404's so no consesus and no connection

first check its up to date!
sourceforge is not the latest release do a search for [ "advor" source code" ] in google to find where to dl

before i have proxy'd it through a simple tor.exe to let it update a bit before it works again

also a list of tor bridges is a good thing to keep up to date.

NOTE:
I found this vpn script used by itself is leaking DNS queries but using the method above (with advor sandboxing the client) the leak is defo resolved through the endpoint.
so ..... defo no dns leak using this method too

Have a great new years eve everyone Biggrin
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

Reply







Users browsing this thread: 1 Guest(s)