3

As mentioned in stem.torproject:

If your torrc doesn't have a CookieAuthentication or HashedControlPassword then to authenticate you will simply call AUTHENTICATE after connecting without any credentials.

So I commented out both CookieAuthentication 1 and HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF in my torrc file.

Then I restarted Tor and tried to connect by just by issuing AUTHENTICATE, without any credential. But I got the following error:

515 Authentication failed: Password did not match HashedControlPassword value from configuration. Maybe you tried a plain text password? If so, the standard requires that you put it in double quotes.

My question is, How can I login without any credential? I am using Tor Browser Bundle 6.5 on my Windows 10.

-torrc-default file-

AvoidDiskWrites 1
Log notice stdout
SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth
ControlPort 9151
ClientTransportPlugin fte exec TorBrowser\Tor\PluggableTransports\fteproxy --managed
ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\obfs4proxy
ClientTransportPlugin meek exec TorBrowser\Tor\PluggableTransports\terminateprocess-buffer TorBrowser\Tor\PluggableTransports\meek-client-torbrowser -- TorBrowser\Tor\PluggableTransports\meek-client
#CookieAuthentication 1
#HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF

Note: I tried both commenting out and removing both lines.

-torrc file-

Bridge obfs4 198.<omitted for public post> iat-mode=0
Bridge obfs4 37.<omitted for public post> iat-mode=0
Bridge obfs4 151.<omitted for public post> iat-mode=0
DataDirectory C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor
GeoIPFile C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip
GeoIPv6File C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6
HiddenServiceStatistics 0
UseBridges 1

Still getting:

250-PROTOCOLINFO 1

250-AUTH METHODS=HASHEDPASSWORD

250-VERSION Tor="0.2.9.9"

250 OK

Screenshot of Tor data directory:

screenshot tor data directory

I have also tried AUTHENTICATE ""but failed.

enter image description here

Community
  • 1
Sourav Ghosh
  • 141
  • 1
  • 6

2 Answers2

1

set CookieAuthentication 0
if you had HashedControlPassword removed it

$ telnet 127.0.0.1 9051
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
AUTHENTICATE
250 OK
consatan
  • 111
  • 1
-1

The working syntax for null authentication to the control port is as:

authenticate ""

[Edited : The documented syntax which you tried, just authenticate, without parameters, is not accepted by Tor (depending on versions) ]

Noino O
  • 37
  • 1
  • 7