Ionut-Cristian Bucur in Bucharest, Romania on November 8-9th 2018 at DefCamp #9. The videos and other presentations can be found on https://def.camp/archive

1. GOOD
BAD
MISCONFIGURED
ANDTHETHETHE
TOR
.onion

2. Who am I?

3. -Nobody lol
-Security enthusiast
-ex-Intern @ Ixia

4. Tor & why onions’ lives matter

5. Onion routing

8. Hidden Services aka FB..CI… .onion-s

10. Facebook on Tor

11. Pornhub educational website on Tor

12. Webhosting Services

15. Wikileaks website on Tor

16. The Guardian submission form on Tor

18. Begging on Tor

19. Lottery on Tor

20. Cryptocoins laundering on Tor

21. Cloned Cards on Tor

22. Counterfeit cash on Tor

23. Gold on Tor

24. Fake IDs on Tor

25. Cheap Apple stuff on Tor

26. Steroids on Tor

27. Weed on Tor

28. Guns on Tor

29. Assassins on Tor

30. Hackers for hire on Tor

31. Malicious mirroring websites on Tor

32. Ransomware as a Service on Tor[0]

33. Ransomware as a Service on Tor[1]

34. Dropper malicious script on Tor

35. Blue whale game on Tor

36. Blackmail & pr0n on Tor

37. Human traffic on Tor

41. DON'T USE CLOUDFARE on Tor

42. Really, don't do it

43. Nvm, it's legit now

44. How police catches people on Tor

46. False Positives

47. False postivies and angry owners

48. How others crawl Tor

49. Deanonymized on Tor

50. Vulnerable Apache Mirror on Tor

52. The Rotten

53. Learning stuff on a Tor carders forum[1]

54. Learning stuff on a Tor carders forum[2]

55. Learning stuff on a Tor carders forum[3]

56. The Good

57. The misconfigured

58. Conclusions & geek stats
• ~20.000 sites crawled
• 1 in 10 cryptojacking
• The deep web is smaller than you think
• Is Tor good or bad?
• @asdxcristi