Join Us!

Notifications
Clear all

Tor Exit Nodes  

  RSS
Christ143uk
(@christ143uk)
Junior Member

Hi,

Just wondering if anyone has any experience with examining computers where the defendant claims to have previously had the device set up as an "exit node" for Tor.

I have done some reading around where I have found it can potentially lead to data being left behind on the device and that being an exit node could attract unwanted attention from the Police.

If anyone has any useful information regarding exit nodes and Tor it would be appreciated.

Also if anyone knows how to tell if a computer has been/is currently being used as an exit node that would be great.

Thanks

Quote
Posted : 02/06/2016 3:00 pm
P_R_H
(@p_r_h)
Junior Member

Hello Sir,

Assuming the defendant hadn't wiped the machine and rebuilt you should be able to locate the tor node config files, install files, etc..

You might also want to try the links below

checker tool for existing nodes-

https://www.dan.me.uk/torcheck

Tor exit node list-

https://www.dan.me.uk/tornodes

Level of success will depend on when this person claimed to be running the exit node..

ReplyQuote
Posted : 02/06/2016 3:50 pm
Christ143uk
(@christ143uk)
Junior Member

Hello Sir,

Assuming the defendant hadn't wiped the machine and rebuilt you should be able to locate the tor node config files, install files, etc..

You might also want to try the links below

checker tool for existing nodes-

https://www.dan.me.uk/torcheck

Tor exit node list-

https://www.dan.me.uk/tornodes

Level of success will depend on when this person claimed to be running the exit node..

Hi,

Thank you for the response, I have checked the list of nodes and can't find an email address corresponding to the user.

I have checked the "torrc" file and it doesn't appear to have the code required to set it up as an exit node; although the suspect claims to have disable this prior to seizure.

I will now run a keyword search to see if I can find anything relating to the code below

ORPort 443
Exitpolicy reject **
Nickname ididntedittheconfig
ContactInfo [email protected]

Many thanks
Chris

ReplyQuote
Posted : 02/06/2016 4:10 pm
Share: