익명화된 스캔을 위해 토르와 함께 프록시 체인 사용하기

### 프록시 체인과 토르로 트래픽 익명화하기: 단계별 가이드
* 🌐 웹사이트에서 TCP 스캔을 수행할 때는 **공개 IP 주소가 노출**되어 웹사이트 소유자가 식별할 수 있다는 점을 이해하는 것이 중요합니다.
* 🔒 신원을 보호하기 위해 프록시 서버를 사용하면 이러한 중개자를 통해 스캔을 라우팅하여 **대상 웹사이트에 프록시의 IP만 표시**되도록 함으로써 IP 주소를 마스킹할 수 있습니다.
* ⚠ 그러나 **단일 프록시 서버에 의존하는 것**은 활동이 기록되고 조사 시 신원이 노출될 수 있으므로 위험할 수 있습니다.
* 🔗 권장되는 방법은 여러 개의 프록시 서버를 사용하는 것으로, **프록시 체인**으로 알려진 방법으로 스캔에 익명성 계층을 추가하는 것입니다.
* 🛡 보안을 강화하려면 **프록시 체인을 토르와 결합**하는 것이 이상적입니다. 토르는 여러 프록시를 활용하고 더 안정적이어서 위치 추적을 어렵게 만들기 때문입니다.
* ⚙ 프록시 체인을 설정하려면 구성 파일을 편집해야 하며, 동적 또는 엄격한 체인과 같은 다양한 모드를 선택할 수 있지만, **Tor를 사용할 때는 기본 모드**로도 충분합니다.
* 📜 프록시 DNS 옵션의 주석을 해제하여 DNS 요청이 숨겨지도록 하고 **토르의 루프백 주소를 어니언 포트와 함께 사용**하도록 기본 구성을 설정하세요.
* 🚀 토르 서비스를 시작한 후, **'프록시체인'이 앞에 붙은 명령**을 실행하여 익명 검색을 수행하거나 안전하게 웹을 브라우징할 수 있습니다.

토르와 함께 프록시 체인을 사용하면 웹 사이트를 검색하는 동안 익명성을 보장하고 사용자의 IP 주소가 노출되지 않도록 보호할 수 있습니다.

so you are ready to hit this website you launch nmap into a basic TCP scan to learn a few things about it but do you know that this website server also learned a few things about you as every scan you sent had your public IP address

that's why you should be using proxy chains and in this video I'm going to tell you what they are and how to set them up with Tor to anonymize your traffic so let's start okay so before I tell you what proxy chains are you need

to get an understanding of what proxies are so with proxies instead of sending all of our scans to this website from our IP address we can use a proxy server in between which will send our scans for us and so now if the website server does flag our scans to notify the website's

owner you'll see the IP address of the proxy server and not ours now we have to be careful here because what could happen is that this website's owner can tell the police that and then the federals upon investigation can see the IP address of the proxy

server and go yeah the contact the server owners and find out who attacked you and now the proxy server will have logs and upon going through those logs they can tell the police that so what do we do well we have two options the first option is that we can

go ahead and use more than one proxy server so instead of sending all of our scans just through this one proxy server we're gonna send it through multiple proxies and this is what proxy chains are as we are chaining together multiple proxy servers to hide ourselves now you

can find most of these proxy servers online for free, but they are usually not trustworthy and stable if we don't know them. So here comes the second and recommended option, which is using Tor with proxy chains to hide our identity. As Tor is more stable and there are

multiple proxies involved, which makes it hard to track down our location. So let's start and see how we can set up and use proxy chains with Tor. Okay, so the first step is to configure proxy chains according to our needs. And to configure it, load up its configuration file by

typing 'sudo space' the text editor you want to use. I'll be using Nano, and then type in the location of the proxy chains configuration file, which is forward slash Etc forward slash proxychains4.conf. Now, your configuration file might be stored somewhere else, but you can use the locate command if you

want help in finding it. But anyways, hit enter, and you'll see the proxy chains configuration file opened in your text editor like this. Now, there are four main modes we run this in: the first one is dynamic chain, the second one is strict chain, the third one is a round robin

chain, and the fourth one is a random chain. Now, as we will be using proxy chains with Tor, it really doesn't matter what mode we're using as we'll be having only one IP address. But just for your understanding, if you were using more than one proxy servers, the dynamic chain

here would chain each of the proxies in your list in the exact same order you put them in. And if one of them is out of service and not responding, it will simply skip that proxy and move to the next one. Whereas the strict chain will not skip to the next proxy and will end

the connection the random chain will just randomly choose a proxy to use and to enable a mode you can just uncomment it out by removing the hashtag sign here so for example if I want to enable the dynamic chain here I can just uncomment it out like this and then comment out

the strict chain by putting a hashtag sign here and so now the dynamic mode is configured for us to use but as I mentioned earlier as we are going to be using Tor it really doesn't matter which mode we're using so you can just leave it on the default mode if you want next

make sure that this option of proxy DNS is uncommented as it hides DNS requests preventing our location from being revealed through DNS leaks and under the proxy lists heading is where we have the default configuration already set to Tor which is basically our loopback address binded with the

onion port of 9050 now if we were not using Tor this is also where we'll be adding the list of our proxy servers you can see the examples of how to put them right here anyway here what I want you to do is also add a SOCKS5 proxy with the same

address import like this as SOCKS5 has a little bit of improvements now if you're wondering what is the difference between these types of proxies then that is a topic for another video but for now just know that SOCKS5 is better than SOCKS4 and HTTPS is mostly better than

HTTP anyway next just save the file and exit okay so now before we go ahead and start using proxy chains first we need to start the Tor service now if you don't already have Tor installed type in sudo apt install tor to install it but once installed and ready to be used

You can type in `sudo service tour start` to start the tour service and then type in `service tour status` to confirm if it is actually running. And yes, as you can see, it says `active (running)`, which means it is up and running. And now we are good to

use ProxyChains. Okay, so to use ProxyChains, simply type `proxychains` in the terminal like this. And then we basically type in any other command that we want to use with it. For example, if I want to run Firefox, I can simply type in `firefox` right here and then hit enter to run it.

Now let's head over to dnsleaktest.com real quick to verify if our connection with Tor has been successfully established. And yes, as you can see, the connection seems to be up and good to go. As I can verify that I'm not in this

place right now. And there you go. Now you can go ahead and scan that website anonymously by adding `proxychains` before your `nmap` command and hitting enter to redirect all your traffic through Tor. If you have any questions regarding the video, make sure to ask

them in the comments section down below. And I will see you in the next one. Thank you. [Music]

Don't get caught! Hide Yourself w/ Proxychains and TOR

An0n Ali

네트워크 트래픽 익명화를 위한 프록시 체인 및 프록시 소개

기본 TCP 스캔을 통해 대상 웹사이트에 대한 사용자의 공인 IP 주소를 확인할 수 있습니다.

프록시 체인은 트래픽 익명화를 위한 솔루션으로 도입되었습니다.

프록시는 중개 서버를 통해 트래픽을 라우팅하여 사용자의 IP 주소를 마스킹합니다.

웹사이트 소유자는 여전히 프록시 서버 로그를 통해 사용자를 추적할 수 있습니다.

여러 프록시 서버(프록시 체인)를 사용하면 익명성을 강화할 수 있습니다.

프록시 체인과 함께 토르 사용하기

토르는 무료 온라인 프록시에 비해 더 안정적이고 안전한 옵션으로 추천합니다.

프록시체인을 구성하려면 구성 파일(예: `/etc/proxychains4.conf`)을 편집해야 합니다.

다양한 프록시 체인 모드(동적, 엄격, 라운드 로빈, 무작위)에 대한 설명입니다.

프록시 DNS를 활성화하여 DNS 누출을 방지합니다.

기본 구성은 루프백 주소와 어니언 포트 9050을 사용하는 Tor로 설정되어 있습니다.

토르에서 프록시체인 설정 및 사용

토르 서비스 설치 및 시작(`sudo apt install tor`, `sudo service tor start`).

토르 서비스 상태 확인(`서비스 토르 상태`).

원하는 명령어 앞에 `proxychains`를 입력해 프록시체인을 사용합니다(예: `proxychains firefox`, `proxychains nmap`).

dnsleaktest.com을 사용하여 익명 연결을 확인합니다.