Skip to content

Latest commit

 

History

History
140 lines (113 loc) · 2.75 KB

tor.md

File metadata and controls

140 lines (113 loc) · 2.75 KB

Tor Setup & Configuration Guide

This guide covers:

  • Installing Tor
  • Configuring Tor settings
  • Setting up a Hidden Service
  • Configuring the Control Port (with/without password)
  • Setting the SOCKS Port
  • Configuring the Service Port and Target Port
  • Finding the .onion hostname

1. Installing Tor

Linux (Debian/Ubuntu)

sudo apt update
sudo apt install tor -y

MacOs

brew install tor

2. Configuring Tor (torrc File)

Locate & Edit torrc

Linux

sudo nano /etc/tor/torrc

MacOs

nano /opt/homebrew/etc/tor/torrc

3. Configuring Control Port

The Control Port allows applications to talk to Tor.

Option 1: No Authentication (Not Recommended for Production)

ControlPort 9051
CookieAuthentication 0

This allows unrestricted access—use it only for testing.

Option 2: Password Authentication (Recommended)

  1. Generate a hashed password: 
    tor --hash-password "yourpassword"
    Example output: 
    16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C
  2. Add it to torrc: 
    ControlPort 9051
HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C

Option 3: Cookie Authentication

  1. Enable cookie authentication in torrc: 
    ControlPort 9051
CookieAuthentication 1
  2. Restart Tor: 
    sudo systemctl restart tor
  3. The cookie file is usually located at: 
    /var/lib/tor/control_auth_cookie
  4. Use it in your applications for authentication.

4. Configuring the SOCKS Proxy

Tor acts as a SOCKS5 Proxy for anonymous traffic.

Add this to torrc:

SOCKSPort 9050

Now, you can route applications through 127.0.0.1:9050.

To test it:

curl --socks5-hostname 127.0.0.1:9050 https://check.torproject.org/

5. Setting Up a Hidden Service

A Hidden Service lets you host a .onion website or server.

Basic Hidden Service (Port Forwarding)

Linux

HiddenServiceDir /var/lib/tor/coinswap/
HiddenServicePort 6102 127.0.0.1:6102

MacOs

HiddenServiceDir /opt/homebrew/var/lib/tor/coinswap
HiddenServicePort 6102 127.0.0.1:6102

Provide required permissions

create sudo mkdir -p /opt/homebrew/var/lib/tor/coinswap
chmod 700 coinswap
  • Service Port (Virtual Port): 6102 (Clients use this to connect to the hidden service)
  • Target Port: 127.0.0.1:6102 (Local port where traffic is redirected)

Tor run the taker client, hidden service is not required.

After configuring, restart Tor:

Linux

sudo systemctl restart tor

MacOs

brew services restart tor