The question is strictly from an attacker's perspective. Imagine I am an attacker running KALI Linux on a VM / live disk. I know that VPN and TOR are probable ways of hiding my identity from my victims.
Here are my list of concerns.
- I am a cheap attacker with no money to spend on true privacy VPNs. What would I opt in that case? Would I stick with TOR or are there any other better alternatives?
- What are the identity leak risks associated with TOR?
- How can I configure the KALI machine in such a way that the entire traffic from my machine is routed via TOR alone?
- How do I make sure that no TCP, UDP or ICMP packet leaves my machine to anywhere else other than through the TOR tunnel?
- Is there a comprehensive guide for setting up TOR securely on KALI?
- Are there any anonymity+offensive security linux distros available?