Tor

[mmsmc]

is anybody here a user of TOR?

[Gremlinzzz]

Not me, i don't believe there can be Online Anonymity using a home computer

[donkyhotay]

It's been shown that you *can* be traced even using tor. Admittedly it's extremely difficult and requires government/military level resources to do. Even then they generally won't unless there is a very good reason because of the cost. I tried it once, just to do so, but it's so slow I wouldn't use it unless I was protesting strongly against a government known for human rights violations. Even then I would assume I am being watched and that my protest was worth the potential repercussions.

[mmsmc]

is it worth just having, meaning should i download it even though i may never use it?

[benc1213]

I haven't used it (yet). I am tempted to though.

[mmsmc]

and this is purely speaking that nothing illegal is happening, but i like to do penetration testing on my own servers, computers and so on, and just recently found out about this, just would like some 2nd opinions before i download

[Dangertux]

and this is purely speaking that nothing illegal is happening, but i like to do penetration testing on my own servers, computers and so on, and just recently found out about this, just would like some 2nd opinions before i download

If what you're pen testing is yours you shouldn't need Tor. It really has nothing to do with pen testing anyway.

Tor has never done more than obfuscating the beginning and endpoint for a packet. It does a decent job at it, though it's a lot more easy to track Tor traffic then the previous posts have eluded to.

Keeping in mind if you're using it for something like (in the pentesting case) sqlmap your dns lookups are going to be done without Tor, so you can still make the association.

In my opinion if you have nothing to hide there is no reason to hide. That being said end point router's in the tor network have pretty much unrestricted access to whatever you're sending through them.

Hope that helps.

[mmsmc]

hey guys, thanks for the feed back, it was really helpful

[haqking]

is it worth just having, meaning should i download it even though i may never use it?

why would you download something you would never use ?

and as mentioned it has nothing to do with Pen testing.

if you want to download something useful for Pen testing try here

http://www.isecom.org/osstmm/

[mmsmc]

why would you download something you would never use ?

and as mentioned it has nothing to do with Pen testing.

if you want to download something useful for Pen testing try here

http://www.isecom.org/osstmm/

cool, thanks ill check it out