16
INVISIBLE WEB Noilson Caio T. de Araújo [email protected]

INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

Embed Size (px)

Citation preview

Page 1: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

INVISIBLE WEB

Noilson Caio T. de Araújo

[email protected]

Page 2: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

CONSIDERAÇÕES INICIAIS

SEGURANÇA

PRIVACIDADE

APOLOGIA

Page 3: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

INTRODUÇÃO

Existem vários repositórios de informações que os motores de buscas não conseguem enxergar, ou seja, diferente das páginas convencionais e visíveis, a invisible web, termo dado a este tipo de prática, tem sua base de dados inacessível aos softwares que criam os índices dos motores de busca.

Page 4: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

A PAISAGEM DE DADOS ESTRUTURADOS

Unstructured queries

Single-page structured queries

Multi-page structured queries

Os usuários colocam consultas (palavra-chave) e obtem uma lista de URLs de páginas web como resultado.

Single-page structured queries

Consultas mais precisas para o motor de busca.

Multi-page structured queries

Estas tarefas são mais

ambiciosas que o conjunto anterior.

Page 5: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

EXEMPLOS

Page 6: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

PARA DEEP WEB

Os dados são claramente úteis para unstructured queries e single-page structured queries, que retornam URL's como resultados.

Page 7: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

ORGANIZAÇÃO

O conteúdo dessa zona se caracteriza por não ser indexado, não existem ligações/links

externos, protegido por senha ou criptografado, scripts e conteúdo não HTML.

Page 8: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

ORGANIZAÇÃO

Quando estes sites são consultados, o retorno é de forma de páginas web dinâmicas que tem um endereço único que permitem que eles sejam recuperados mais tarde, porém

não são persistentes.

Page 9: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

The Onion Routing

Onion Router

Onion Proxy

Page 10: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

CASOS

Page 11: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

.onion

pseudo-top-level domain

anonymous hidden service

onion TLD is not in the Internet DNS root

tor2web

Page 12: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry

Lolita City and Freedom Hosting;

30 hours;

To our shock, the community of pedos were able to quickly regroup and rebuild Lolita City and Freedom Hosting within a week;

True identity of the builder and architect of Freedom Hosting;

What we found was truly shocking, it was the deeds to a California, USA 'shell' company for 12 Tor Exit Nodes named Formless Networking LLC.

Page 13: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

WTF?

Page 14: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

"Mike Perry"

Freedom Networking LLC has the Apache backend.

Freedom Hosting server has ngnix front cache to proxy a backend Apache with PHP safemode on...

Tor Security expert who fixed hidden service IP enumeration bugs

Freedom Server has as business IP internal NAT of 10.0.1.X

Mike Perry run's 12 Tor exit nodes under a shell company under Formless Networking LLC

Page 15: INVISIBLE WEB - OWASP TLD is not in the Internet DNS root tor2web OpDarknet Official Release -- 10/30/2011 - Pedo hunt trophies, Bear Rugs for Mike Perry Lolita City and Freedom Hosting;

Demonstração com o Free Net Project