+
Build your own directory site
+
Finally, we come to the most interesting part, which is building your own directory site. By doing this you build a webring, and help others to reach their wanted services.
+
The source code is kindly provided by nihilism, and you can visit his own webring http://uptime.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/
+
Now we will host the webring using under whonix. The reason to use whonix is its superior security, even your website get compromised and get RCE, the attacker can only take down your site, but cannot reveal your real identity. If he wants to reveal your real identity, he needs to further exploit the whonix gateway or perform a vm escape, which will be significantly harder.
+
The OS I use is Qubes OS, if you do not know what is this please consult Navigating Qubes OS
+
1.Create a standalone dedicated whonix workstation vm, run this command in dom0
+
+$ qvm-create --class StandaloneVM --template whonix-workstation-17 --label yellow webring-hosting
+
+
2.Next assign the net vm of this qube to your whonix gateway, which is mentioned in above qubes tutorial
+
3.Start to setup the network, you can also consult this official whonix document Whonix onion service hosting
+
First check the ip address of the whonix workstation, open a terminal in workstation
+
+ $ ip a
+ 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
+ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+ inet 127.0.0.1/8 scope host lo
+ valid_lft forever preferred_lft forever
+ inet6 ::1/128 scope host noprefixroute
+ valid_lft forever preferred_lft forever
+2: eth0: mtu 1500 qdisc mq state UP group 1 qlen 1000
+ link/ether 00:16:3e:5e:6c:00 brd ff:ff:ff:ff:ff:ff
+ inet 10.137.0.46/32 scope global eth0
+ valid_lft forever preferred_lft forever
+ inet6 fe80::216:3eff:fe5e:6c00/64 scope link
+ valid_lft forever preferred_lft forever
+
+
Record the address of eth0
+
4.Edit the torrc config file in whonix gateway. Start a terminal in whonix gateway, and edit /usr/local/etc/torrc.d/50_user.conf for running your onion service
+
+
Add the above content into the file
+
You should replace the ip address 10.137.0.46 to your own workstation ip address
+
5.Restart the tor client in whonix gateway using the control panel
+
+
6.Next check the onion address that is just generated in /var/lib/tor/webring/
+
+# root@host:/var/lib/tor/webring# cat hostname
+4i4q5btqberkgwv7fmra3tatoqdn6slseiinkbe2jgqkyghxc5einjqd.onion
+
+
7.Install the nginx and webring source code into the workstation vm according to this repo webring project
+
First clone the repo
+
+$sudo git clone http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/darknet-onion-webring /srv/darknet-onion-webring
+
+
8.Install nginx and php(lol php)
+
+$sudo apt install php8.2-fpm nginx -y
+
+
9.Copy the nginx config
+
+$ sudo cp /srv/darknet-onion-webring/nginx.conf /etc/nginx/sites-available/uptime.conf
+
+
10.Next enable nginx configs and python dependencies
+
+$ ln -s /etc/nginx/sites-available/uptime.conf /etc/nginx/sites-enabled/
+
+$ nginx -s reload
+
+$ sudo apt install python3-pandas python3-requests python3-socks
+
+
11.Check if the webpage is running correctly by trying to access it locally
+
+$ curl 127.0.0.1:4443
+
+
If you get the webpage then it is up and running
+
+
12.Check the python uptime checker script is running correctly
+
+$ python3 scripts/uptimechecker.py
+ [+] ONION UPTIME CHECKER
+ [+] Reading the CSV File: /srv/darknet-onion-webring/www/links/webring.csv
+ [+] Checking if each .onion link is reachable:
+ [+] Editing the uptime score
+ 0
+ [+] http://uptime.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion 200
+ http://uptime.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion ✔️
+ [+] Reading the CSV File: /srv/darknet-onion-webring/www/links/Exchanges.csv
+ [+] Checking if each .onion link is reachable:
+ [+] Editing the uptime score
+ 0
+ http://exchanger.infinityjs5qob5euyao745kp5x2hh4xquh7qs5cze3kcxv63xdwxlad.onion/ ❌
+ [+] Editing the uptime score
+ 1
+ [+] http://robosats6tkf3eva7x2voqso3a5wcorsnw34jveyxfqi2fu7oyheasid.onion/ 200
+ http://robosats6tkf3eva7x2voqso3a5wcorsnw34jveyxfqi2fu7oyheasid.onion/ ✔️
+ [+] Editing the uptime score
+ 2
+
+
If you see something like this without any exception then you are all good
+
Then make this python script a crontab job, so you routinely check the uptime of your webring sites.
+
+# crontab -e
+
+*/3 0 * * * python3 /srv/darknet-onion-webring/scripts/uptimechecker.py
+
13.Finally, edit the whonix workstation firewall so onion traffic from the gateway can reach it
+
First create the firewall config directory
+
+$ sudo mkdir -p /usr/local/etc/whonix_firewall.d
+
+
Then find the "User firewall setting" in the GUI menu, add the below content
+
+
Save it can find the "Reload firewall" in the GUI menu, and make sure it is reloaded sucessfully
+
+
+
14.Open a tor browser, and try to access your own site
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+