Enrich Dark Web tools metadata (THE-159)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
s0lray
2026-03-27 19:21:19 -04:00
co-authored by Paperclip
parent 569e5189b8
commit cacd6be71d
+288 -18
View File
@@ -5843,17 +5843,62 @@
{
"name": "Reddit Deep Web",
"type": "url",
"url": "https://www.reddit.com/r/deepweb/"
"url": "https://www.reddit.com/r/deepweb/",
"description": "Subreddit focused on dark web discussions, beginner guidance, and community-sourced OSINT references.",
"status": "live",
"pricing": "free",
"bestFor": "Community discussion on dark web OSINT topics",
"input": "Posts, comments, and search queries",
"output": "Community-shared links, advice, and discussion threads",
"opsec": "passive",
"opsecNote": "Browsing is passive but account activity is logged by Reddit.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Reddit Onions",
"type": "url",
"url": "https://www.reddit.com/r/onions/"
"url": "https://www.reddit.com/r/onions/",
"description": "Subreddit for .onion service discussion, availability reports, and tool recommendations.",
"status": "live",
"pricing": "free",
"bestFor": "Tracking .onion ecosystem changes via community reports",
"input": "Posts, comments, and subreddit search terms",
"output": "User-reported onion links and operational status discussions",
"opsec": "passive",
"opsecNote": "Content consumption is passive; authenticated interactions are attributable to Reddit accounts.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Reddit Darknet",
"type": "url",
"url": "https://www.reddit.com/r/darknet/"
"url": "https://www.reddit.com/r/darknet/",
"description": "Community forum discussing darknet marketplaces, ecosystem events, and related threat activity.",
"status": "live",
"pricing": "free",
"bestFor": "Market ecosystem pulse and discussion-driven lead generation",
"input": "Posts, comments, and subreddit search terms",
"output": "Discussion intelligence, incident chatter, and directional leads",
"opsec": "passive",
"opsecNote": "Passive reading is low-risk, but participation creates account-linked activity trails.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
@@ -5864,17 +5909,62 @@
{
"name": "Tor Download (T)",
"type": "url",
"url": "https://www.torproject.org/download/"
"url": "https://www.torproject.org/download/",
"description": "Official Tor Project distribution page for Tor Browser and related anonymity tooling.",
"status": "live",
"pricing": "free",
"bestFor": "Obtaining trusted Tor Browser binaries",
"input": "Platform selection and download request",
"output": "Official Tor Browser installer packages",
"opsec": "passive",
"opsecNote": "Download activity is visible to network observers unless additional transport protections are used.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Freenet Project (T)",
"type": "url",
"url": "https://freenetproject.org/pages/download.html"
"url": "https://www.hyphanet.org/",
"description": "Hyphanet (formerly Freenet) is a decentralized, privacy-oriented network for anonymous publishing and file sharing.",
"status": "live",
"pricing": "free",
"bestFor": "Anonymous peer-to-peer content distribution",
"input": "Locally hosted or requested content within the network",
"output": "Distributed content retrieval and sharing",
"opsec": "passive",
"opsecNote": "Traffic is routed through a decentralized overlay, reducing direct source attribution.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "I2P Anonymous Network (T)",
"type": "url",
"url": "https://geti2p.net/en/"
"url": "https://i2p.net/",
"description": "I2P is an anonymous overlay network supporting eepsites, messaging, and peer-to-peer services.",
"status": "live",
"pricing": "free",
"bestFor": "Accessing and hosting services inside the I2P anonymity network",
"input": "Local I2P router traffic and destination lookups",
"output": "Anonymized in-network service access",
"opsec": "passive",
"opsecNote": "Garlic routing and distributed peers obscure endpoint relationships.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
@@ -5885,37 +5975,142 @@
{
"name": "OnionScan",
"type": "url",
"url": "https://github.com/s-rah/onionscan"
"url": "https://github.com/s-rah/onionscan",
"description": "Open-source scanner for .onion services that identifies metadata leaks and potential OPSEC weaknesses.",
"status": "live",
"pricing": "free",
"bestFor": "Assessing exposed metadata and weak configurations on hidden services",
"input": ".onion targets",
"output": "Scan findings and metadata leak indicators",
"opsec": "active",
"opsecNote": "Direct probing of hidden services can be logged and may alert target operators.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "TorBot",
"type": "url",
"url": "https://github.com/DedSecInside/TorBot"
"url": "https://github.com/DedSecInside/TorBot",
"description": "Python-based crawler for discovering and indexing .onion links and related metadata.",
"status": "live",
"pricing": "free",
"bestFor": "Automated dark web crawling and onion link collection",
"input": "Seed onion links and crawl configuration",
"output": "Crawled onion pages, discovered links, and metadata",
"opsec": "active",
"opsecNote": "Crawling generates repeated target requests that can be detected by destination services.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Tor Scan",
"type": "url",
"url": "https://www.torscan.io/"
"url": "https://www.torscan.io/",
"description": "Legacy or ambiguous dark web scanning entry with unclear maintenance and uncertain distinction from OnionScan.",
"status": "degraded",
"pricing": "free",
"bestFor": "Legacy reference for Tor scanning workflows pending mapping cleanup",
"input": ".onion targets",
"output": "Potential scan intelligence when service is available",
"opsec": "active",
"opsecNote": "Any scan-style use is active probing and may expose investigator patterns.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "Onioff",
"type": "url",
"url": "https://github.com/k4m4/onioff"
"url": "https://github.com/k4m4/onioff",
"description": "Onion URL inspection utility for checking reachability and extracting metadata from hidden service links.",
"status": "live",
"pricing": "free",
"bestFor": "Quick inspection of onion links and service metadata",
"input": ".onion URLs",
"output": "Link metadata and availability information",
"opsec": "active",
"opsecNote": "Inspection requests contact target onion services through Tor and can be observed by targets.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Hunchly Hidden Services Report",
"type": "url",
"url": "https://darkweb.hunch.ly/"
"url": "https://darkweb.hunch.ly/",
"description": "Daily feed of newly observed hidden services and associated monitoring data from Hunchly.",
"status": "live",
"pricing": "free",
"bestFor": "Monitoring new hidden-service discovery trends",
"input": "Feed queries and subscription requests",
"output": "Hidden service report data and update feeds",
"opsec": "passive",
"opsecNote": "Primarily consumes third-party aggregated reporting rather than probing targets directly.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "docker-onion-nmap (T)",
"type": "url",
"url": "https://github.com/milesrichardson/docker-onion-nmap"
"url": "https://github.com/milesrichardson/docker-onion-nmap",
"description": "Dockerized nmap/proxychains workflow for enumerating exposed ports on onion services through Tor.",
"status": "degraded",
"pricing": "free",
"bestFor": "Containerized port enumeration of hidden services",
"input": ".onion hosts",
"output": "Network scan results and open-port findings",
"opsec": "active",
"opsecNote": "Port scanning is high-signal active probing and is likely visible to target operators.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "Onion Investigator",
"type": "url",
"url": "https://oint.ctrlbox.com/"
"url": "https://oint.ctrlbox.com/",
"description": "Ambiguous investigation entry with limited current validation and unclear relation to other onion analysis tools.",
"status": "degraded",
"pricing": "free",
"bestFor": "Legacy onion investigation reference pending mapping decision",
"input": "Unknown",
"output": "Unknown",
"opsec": "unknown",
"opsecNote": "Insufficient current evidence on operating model; treat as potentially active until clarified.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
}
]
},
@@ -5926,12 +6121,42 @@
{
"name": "Onion Cab",
"type": "url",
"url": "https://onion.cab/"
"url": "https://onion.cab/",
"description": "Dark web search/directory endpoint with intermittent reliability and limited contemporary documentation.",
"status": "degraded",
"pricing": "free",
"bestFor": "Supplemental onion discovery when primary search tools miss coverage",
"input": "Keywords and category browsing",
"output": "Directory-style onion link listings",
"opsec": "passive",
"opsecNote": "Directory browsing is generally passive, but gateway logging policies are often opaque.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Ahmia",
"type": "url",
"url": "https://ahmia.fi/"
"url": "https://ahmia.fi/",
"description": "Well-known Tor search engine indexing onion services with clearnet accessibility for discovery workflows.",
"status": "live",
"pricing": "free",
"bestFor": "Primary onion search and service discovery",
"input": "Search keywords",
"output": "Indexed onion search results",
"opsec": "passive",
"opsecNote": "Query activity is mediated by Ahmia rather than direct probing of each destination.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
@@ -5942,19 +6167,64 @@
{
"name": "Hidden Wiki",
"type": "url",
"url": "https://thehiddenwiki.org/"
"url": "https://thehiddenwiki.org/",
"description": "Historically popular onion directory with variable trustworthiness, mirror churn, and high link rot.",
"status": "down",
"pricing": "free",
"bestFor": "Historical reference for onion directory structures",
"input": "Category browsing",
"output": "Curated onion link lists when accessible",
"opsec": "passive",
"opsecNote": "Directory browsing is passive, but listed links often carry high operational risk.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
}
]
},
{
"name": "Web O Proxy",
"type": "url",
"url": "https://weboproxy.com/"
"url": "https://weboproxy.com/",
"description": "Web-based onion proxy/gateway style entry with uncertain current reliability and attribution risk.",
"status": "degraded",
"pricing": "free",
"bestFor": "Legacy gateway access reference for onion destinations",
"input": ".onion URLs",
"output": "Gateway-mediated onion page access",
"opsec": "unknown",
"opsecNote": "Gateway models can expose user IP/activity to operators; treat as high-risk unless verified.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "IACA Dark Web Investigation Support",
"type": "url",
"url": "https://iaca-darkweb-tools.com/"
"url": "https://iaca-darkweb-tools.com/",
"description": "International Anti Crime Academy dark web investigation support portal for federated search workflows.",
"status": "live",
"pricing": "free",
"bestFor": "Federated dark web investigation support and discovery",
"input": "Keywords and investigative query terms",
"output": "Aggregated search intelligence",
"opsec": "passive",
"opsecNote": "Primarily query-mediated discovery; avoid entering sensitive operational indicators into shared portals.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},