Skip to content

Instantly share code, notes, and snippets.

View nusenu's full-sized avatar

nusenu

105 followers · 0 following
View GitHub Profile
@nusenu
nusenu / get-intro-points.py
Created February 28, 2017 02:12
accepts an onion address (without .onion suffix) and prints the introduction points (relay fingerprints)
#!/usr/bin/env python
from stem.control import Controller
import base64
import binascii
import sys
onion = sys.argv[1]
with Controller.from_socket_file(path='/home/username/.tor/mytorsocket') as controller:
controller.authenticate()
desc = controller.get_hidden_service_descriptor(onion)
for introduction_point in desc.introduction_points():
@nusenu
nusenu / 2017-04-20_gpg_key_transition_statement.txt
Created April 21, 2017 12:01
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
20 April 2017
I'm transitioning my email GPG keys (mainly used for mailing lists).
My old key is
@nusenu
nusenu / keybase.md
Created May 19, 2017 11:28

Keybase proof

I hereby claim:

  • I am nusenu on github.
  • I am nusenu (https://keybase.io/nusenu) on keybase.
  • I have a public key whose fingerprint is 9690 CF1F BBB4 2985 954D F2BB AD61 38C2 45CD 427E

To claim this, I am signing this object:

@nusenu
nusenu / Guard-only_relay_IPv4_changerate_2017-03.txt
Last active May 20, 2017 10:06
This list shows how often a given guard-only relay changed its IP address between 2017-02-28 23:00 and 2017-03-31 22:00 (analyzing 727 consensuses)
(2738 guard-only relay fingerprints not shown since they never changed IPv4 address)
77 guard-only relays shown:
if you would sum their max. guard probabilty value: 3.25%
+------------------------------------------+--------------------------------------+
| fingerprint | guard_prob (max. value of the month) |
+------------------------------------------+--------------------------------------+
@nusenu
nusenu / AS197922_relays_2017-05-17-2200.txt
Created May 29, 2017 23:05
last_restarted timestamps for all relays known in the AS 197922 (only relays running between 2017-05-11 - 2017-05-17 are included)
+------------------------------------------+---------+---------------------+-------------------+------------------------------------------------------------------------+
| fingerprint | running | last_restarted | nickname | contact |
+------------------------------------------+---------+---------------------+-------------------+------------------------------------------------------------------------+
| 9C900A7F6F5DD034CFFD192DAEC9CCAA813DB022 | 1 | 2016-11-09 14:52:29 | firstor2 | tor terjan net |
| F2309D62007457F8C6DBCC150119193A312099DC | 1 | 2017-01-01 13:31:00 | torpidsFRtechcrea | torpids AT yahoo dot com - 1JYHfzVFVD7n2Sezz3DEHDFgGYjQWpDjqF |
| 81D59D17CFAA160B002D368AD00330C7423AE010 | 1 | 2017-01-12 19:02:37 | ADKP | NULL |
| 9A
@nusenu
nusenu / 2017-06-07_tor_network_65_relays_group.txt
Last active June 11, 2017 13:46
65 new tor exit relays showed up between 2017-06-07 15:37:32 - 16:08:54 (UTC)
(based on onionoo data from 2017-06-07 18:00)
_All_ 65 relays in the following table have the following characteristics:
(not shown in the table to safe some space)
- OS: Linux
- run two instances per IP address (the number of relays is only uneven because in one case they created 3 keys per IP)
- ORPort: random
- DirPort: disabled
- Tor Version: 0.2.9.10
@nusenu
nusenu / potential_seizure_candidates.txt
Last active June 12, 2017 17:12
OVH and Online SAS (FR) based guard-only relays that disappeared between 2017-05-12 and 2017-05-18
Reach me at https://twitter.com/nusenu_ (or via email)
if you have more details.
+---------------------+----------+-----------------+---------------------+--------------------------------+
| last_seen | FP | IP | nickname | contact | comments
+---------------------+----------+-----------------+---------------------+--------------------------------+
| 2017-05-14 22:00:00 | 9E339307 | 37.187.18.109 | 1001001de2 | Admin 0671 D82 F F0 E1 9 3AA |
| 2017-05-18 23:00:00 | 0C2E5558 | 51.255.211.2 | AmnesicProsecutor | NULL |
| 2017-05-15 15:00:00 | 0639612F | 92.222.20.130 | Baki | tor0517@kiito.xyz | seized (confirmed by operator)
| 2017-05-12 17:00:00 | F0A13CA9 | 163.172.185.161 | caf4f922534cea81d13 | NULL |
@nusenu
nusenu / tor_version-to-proto.txt
Created September 9, 2017 18:22
Four unique proto lines identified (used partial Sep 2017 descriptor archive):
proto Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2
proto Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2
proto Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2
proto Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
@nusenu
nusenu / hackerfactor-blog-comment-nusenu.txt
Created September 23, 2017 22:57
my comment to blog post "A little honey goes a long way" on hackerfactor.com
This was meant as a comment for
https://www.hackerfactor.com/blog/index.php?/archives/776-A-little-honey-goes-a-long-way.html
but tor users cannot comment there.
Hi Neal,
you are linking to the page "https://nusenu.github.io/OrNetStats/" with the link
named "undocumented families". This might lead readers to think that all groups
(there are multiple) on that page are "undocumented" (bad) families - which is not the case.
@nusenu
nusenu / exits-failing-dns
Last active November 20, 2017 23:05
tor exits failing DNS (>80%) as per 2017-11-12
+------------------------------------------+--------------------+----------------------------------------------------------------------------+
| fingerprint | nickname | contact | contacted
+------------------------------------------+--------------------+----------------------------------------------------------------------------+
| DAB96CEA61CC039A803217035293FAB32645FDDA | kree | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | y
| B84F248233FEA90CAD439F292556A3139F6E1B82 | tollana | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | y
| 9BDEC15EAE422563716AFE0025B9E66C9D4CCEBD | freki | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | y
| B0279A521375F3CB2AE210BDBFC645FDD2E1973A | chulak | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | y
| 5D1