Tor2Web Onion DNS Query Detection

Info Nessus Network Monitor Plugin ID 8819


The remote host is accessing a Tor hidden service through Tor2Web.


Tor2web is a software project that allows Tor hidden services to be accessed from a standard browser without being connected to the Tor network. In the past, various malware campaigns and botnets have utilized Tor2Web to exfiltrate data or communicate externally. Recent traffic from this host indicates it has accessed a Tor URL through a known Tor2Web proxy.



See Also

Plugin Details

Severity: Info

ID: 8819

Family: Policy

Published: 2015/07/24

Modified: 2015/07/24

Risk Information

Risk Factor: Info

Vulnerability Information

CPE: cpe:/a:torproject:tor2web