x.comthreadDark Web Informer (@DarkWebInformer) on X
A security researcher released a PoC (on GitHub, user kolmteistov) and a patch for two critical takeover vulnerabilities in GoBalance, the Bitcoin balance-checking software widely used by Tor darknet market and forum onion services. One of the flaws allows recovery of a GoBalance onion service's master identity key from a single public key, enabling full service takeover; the vulnerabilities were reportedly exploited in real attacks against the Dread forum and Omega Darknet Market.
TL;DR PoC and patch drop for GoBalance onion-service takeover bugs already exploited against Dread and Omega Darknet Market.
Organisations named here
- Dread
- Omega Darknet Market
Technologies named here
- GoBalance PoC
- GoBalance
- Tor
- Bitcoin
Techniques named here
- Master identity key recovery
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup