https://github.com/aesthicethics/authenticated-torsite

Deployed a smart device status monitoring web‑app using TOR on a self configured RPI Server as the first ever PoC for a theoretical IoT Security Idea. The app dynamically monitors and displays the online status of an ESP8266 using BASH Scripts and CRON
https://github.com/aesthicethics/authenticated-torsite

flask nginx python tor

Last synced: 3 months ago
JSON representation

Deployed a smart device status monitoring web‑app using TOR on a self configured RPI Server as the first ever PoC for a theoretical IoT Security Idea. The app dynamically monitors and displays the online status of an ESP8266 using BASH Scripts and CRON

• Host: GitHub
• URL: https://github.com/aesthicethics/authenticated-torsite
• Owner: AesthicEthics
• License: mit
• Created: 2021-05-13T20:54:06.000Z (about 5 years ago)
• Default Branch: main
• Last Pushed: 2023-04-10T13:08:36.000Z (about 3 years ago)
• Last Synced: 2025-07-23T11:53:08.760Z (11 months ago)
• Topics: flask, nginx, python, tor
• Language: CSS
• Homepage:
• Size: 24.4 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Authenticated-TorSite

Developed and deployed a smart home webapp on Tor as an authenticated service hosted on a Raspberry Pi. The project involved piping connectivity data from locally connected ESP8266 devices (could be any IoT or smart device) to a webapp via a python program/script. The python program then uses flask to pipe that data to and render an HTML page (using Javascript) which further used JQuery and CSS to display connectivity, temprature and proxy time information in a visually appealing manner. The website is hosted using Nginx which has been configured to allow interoperability between the python program and the server using UWSGI. The Nginx server is then deployed as a TOR hidden service. To add a layer of security, public/private key pairs are generated for the authorized clients to only allow select indiviuals to access the Tor Site. 

This project was the first proof of concept where TOR is used to enhance smart device security by shutting down WAN based vulnerabilities. Often time, when users connect to local smart devices over WAN, they expose sensitive information such as IP addresses and more. Onion routing allows same form of access but without exposing any sensitive information at all, and only allowing certain users access, even if multiple users know the onion url. 

A large amount of this project was configuration file writing, bash scripting and raspbian OS developing. 

--- Links & Development Questions ------

Q: Currently using cron and a bash script to update data (such as temprature and proxy time) on the server every 5 mins, are there better options? 

Links: 

Project WriteUp: https://thakura.medium.com/using-tor-to-secure-iot-deployments-1e201b6959a6