[tor-onions] Possible Tor network attack?

0xf2 at secmail.pro 0xf2 at secmail.pro
Sat Oct 17 06:11:50 UTC 2020


Some onionsites are returning 0xF2 errorcode but their servers are online.
Is the middle node blocking Tor's description request?


Details: 0xF2 — Introduction failed, which means that the descriptor was
found but the service is no longer connected to the introduction point. It
is likely that the service has changed its descriptor or that it is not
running.


PoC:
foreach lists in OnionServerLists.txt: do
code := query OnionURL
if code ne 200
log
fi
endfor


One of those URL:
http://zkyo47fhjhfstn3a2bnaj3ir5rcv7f6vo3cuktpjpiw2mxfjqakqipyd.onion/

Try to open above example URL on Tor Browser 10 per 2 hours.




More information about the tor-onions mailing list