Daniel's Hosting

From Hidden Wiki
Jump to navigation Jump to search
Unix Assembly language Mathematics Web development I2P
GhostBSD Assembly Programming Tutorial Statistics Django for Beginners MuWire
GUI Artificial intelligence Artificial neural network Machine learning Messenger
Tkinter Artificial intelligence Artificial neural network Machine Learning Mastery with Python Session

Daniel's Hosting is a free web hosting services. It can be connected through surface web and darknet.

http://dhosting4xxoydyaivckq7tsmtgi4wfs3flpeyitekkmqwu4v4r46syd.onion/

http://dhosting4okcs22v.onion/

https://hosting.danwin1210.me/



http://danielas3rtn54uwmofdo3x2bsdifr47huasnmbgqzfrec5ubupvtpid.onion/

https://danwin1210.me/


http://danielas3rtn54uwmofdo3x2bsdifr47huasnmbgqzfrec5ubupvtpid.onion/mail/index.php

http://tt3j2x4k5ycaa5zt.onion/mail/index.php

https://danwin1210.me/mail/index.php


Security problems

If you want to login as a web master, you should set your Tor Browser's Security Settings as "Safer" or "Standard". It doesn't work when you set as "Safest" since it needs JavaScript.


It's safe to use Tails or Whonix when you build your own darknet site since you can't use Tor Browser with "Safest" "Security Settings" on Freedom Hosting Reloaded or Daniel's Hosting.

First hacking

  • Popular Dark Web hosting provider got hacked, 6,500 sites down

November 17, 2018

The hack took place on Thursday, November 15, according to Daniel Winzen, the software developer behind the hosting service.

"As per my analysis it seems someone got access to the database and deleted all accounts," he said in a message posted on the DH portal today.

"Unfortunately, all data is lost and per design, there are no backups," Winzen told ZDNet in an email today. "I will bring my hosting back up once the vulnerability has been identified and fixed."

Currently, he identified one flaw, a PHP zero-day vulnerability.

https://www.zdnet.com/article/popular-dark-web-hosting-provider-got-hacked-6500-sites-down/

Second hacking

Hosting - Info

I have some sad news. On March 10th at around 03:30 AM UTC all databases related to my hosting were deleted from the database server. There was a new database user with full permissions. But given that my hosting database is gone, I can't associate it with an account to look deeper into how it got full permissions. As of now, it is not clear how or when the hack happened. If you have an idea, feature requests for future versions or maybe a fix for the vulnerability, please consider contributing to my open source project at https://github.com/DanWin/hosting.

Although this so far looks like a database only hack, similar to the November 2018 hack, you should treat all data as leaked and change your passwords on other sites, should you be using the same one elsewhere as on any of the sites I hosted.

There are roughly 390 GB of user data from 7595 user accounts on the server. I will keep the server active until 25th March so that everyone has a chance to download their current files (without database) via FTP or SFTP.

Being a darknet hoster has taught me many things. However, this is a free time project I do next to my full time job and it's very time consuming to try and keep the server clean from illegal and scammy sites. I spend 10 times more time on deleting accounts than I can find time to continue development. At this time I do not plan on continuing the hosting project, but this doesn't have to be the end. There are other hosting providers like Freedom Hosting Reloaded or OneHost and my project is available for download, which should enable anyone willing to become the next darknet shared hosting provider to start where I left of.

Update March 11th 06:00 AM UTC: private keys of hidden services are now copied and available in your /data/ directory. If you don't know your system account to connect via (S)FTP, it consists of the first 32 characters of your first onion address. If it was a v2 address, it's the full address (including .onion). Since yesterday I've got several messages asking me not to give up. The project in it's current state is a lot of work to maintain. I have many ideas on what to improve and which features to add. But after spending most of my time on answering mails or getting rid of just another 50+ scam sites every day, there is hardly any time for development. I may start another hosting project in the future, when I found time to improve the current platform. But it may take several months before I get there.

If you would like to show your support, you can donate BTC via 17EH5c3zfzw8ictPxEujhuoULV4QZ4Stt7

http://dhosting4xxoydyaivckq7tsmtgi4wfs3flpeyitekkmqwu4v4r46syd.onion/

See also