In such a case that you only need to perform this once, you could opt for using Tails (it also sends all of the traffic via Tor) over Whonix for the duration of the exploitation since it's an amnesic OS.īut always ensure you purchase a server to carry out the actual attacks! Since the actions you take on the server you're running the exploit from could also de-anonymize you even if you're using Tor and paid for the server in XMR.Īs forest mentioned in the comments, it is also important to ensure that if you're going to SSH to an anonymously purchased server, you need to configure your SSH client such that it does not send all of your public keys, as any other public keys you have configured will also be sent to the server, thus potentially leaking your identity. Of course, this isn't 100% fool proof either. Then wipe the server entirely when you're done and burn any credentials, etc. This recommendation is also outlined in the Whonix documentation.Ī better way of doing this would be to use Whonix for your host (so your traffic is networked via Tor), rent a server with XMR, SSH to that server over Tor, install Metasploit on that server and then use that server to launch your exploit. Installing unnecessary things in Whonix since the process of downloading and installing the binaries could de-anonymize you in itself. For example, the actions you take on the hypothetical machine after the exploitation could de-anonymize you. Just because you send your traffic over Tor, it doesn't necessarily mean you're 100% anonymous. However, there are many other ways in which you can be de-anonymized. In the next part I'll show you some of the things you probably want to do when booting into Whonix for the first time.Whonix routes all of the network traffic via Tor, so theoretically speaking - yes. The entire process takes about 5 to 10 minutes once you have downloaded the 2 appliances. Today, in the video below, I'm going to show you just how simple it is to import both the Whonix gateway and the Whonix workstation appliances, into VirtualBox. Whonix is the only actively developed OS designed to be run inside a VM and paired with Tor. Pre-installed, pre-configured applications are ready for use, and installing additional applications or personalizing the desktop will in no way jeopardize the user. A heavily reconfigured Debian base is run inside multiple virtual machines, providing a substantial layer of protection from malware and IP leaks. It makes online anonymity possible via fail-safe, automatic, and desktop-wide use of the Tor network. It realistically addresses attacks while maintaining usability.
Whonix is a desktop operating system designed for advanced security and privacy. If you read my post entitled, ' Whonix: What is It?', then you already know:
0 kommentar(er)
