From cacd6be71db6a259514f0d49ea4ec5acb20a6394 Mon Sep 17 00:00:00 2001 From: s0lray Date: Fri, 27 Mar 2026 13:42:05 -0400 Subject: [PATCH] Enrich Dark Web tools metadata (THE-159) Co-Authored-By: Paperclip --- public/arf.json | 306 +++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 288 insertions(+), 18 deletions(-) diff --git a/public/arf.json b/public/arf.json index b8b4568..1eceaec 100644 --- a/public/arf.json +++ b/public/arf.json @@ -5843,17 +5843,62 @@ { "name": "Reddit Deep Web", "type": "url", - "url": "https://www.reddit.com/r/deepweb/" + "url": "https://www.reddit.com/r/deepweb/", + "description": "Subreddit focused on dark web discussions, beginner guidance, and community-sourced OSINT references.", + "status": "live", + "pricing": "free", + "bestFor": "Community discussion on dark web OSINT topics", + "input": "Posts, comments, and search queries", + "output": "Community-shared links, advice, and discussion threads", + "opsec": "passive", + "opsecNote": "Browsing is passive but account activity is logged by Reddit.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Reddit Onions", "type": "url", - "url": "https://www.reddit.com/r/onions/" + "url": "https://www.reddit.com/r/onions/", + "description": "Subreddit for .onion service discussion, availability reports, and tool recommendations.", + "status": "live", + "pricing": "free", + "bestFor": "Tracking .onion ecosystem changes via community reports", + "input": "Posts, comments, and subreddit search terms", + "output": "User-reported onion links and operational status discussions", + "opsec": "passive", + "opsecNote": "Content consumption is passive; authenticated interactions are attributable to Reddit accounts.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Reddit Darknet", "type": "url", - "url": "https://www.reddit.com/r/darknet/" + "url": "https://www.reddit.com/r/darknet/", + "description": "Community forum discussing darknet marketplaces, ecosystem events, and related threat activity.", + "status": "live", + "pricing": "free", + "bestFor": "Market ecosystem pulse and discussion-driven lead generation", + "input": "Posts, comments, and subreddit search terms", + "output": "Discussion intelligence, incident chatter, and directional leads", + "opsec": "passive", + "opsecNote": "Passive reading is low-risk, but participation creates account-linked activity trails.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5864,17 +5909,62 @@ { "name": "Tor Download (T)", "type": "url", - "url": "https://www.torproject.org/download/" + "url": "https://www.torproject.org/download/", + "description": "Official Tor Project distribution page for Tor Browser and related anonymity tooling.", + "status": "live", + "pricing": "free", + "bestFor": "Obtaining trusted Tor Browser binaries", + "input": "Platform selection and download request", + "output": "Official Tor Browser installer packages", + "opsec": "passive", + "opsecNote": "Download activity is visible to network observers unless additional transport protections are used.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Freenet Project (T)", "type": "url", - "url": "https://freenetproject.org/pages/download.html" + "url": "https://www.hyphanet.org/", + "description": "Hyphanet (formerly Freenet) is a decentralized, privacy-oriented network for anonymous publishing and file sharing.", + "status": "live", + "pricing": "free", + "bestFor": "Anonymous peer-to-peer content distribution", + "input": "Locally hosted or requested content within the network", + "output": "Distributed content retrieval and sharing", + "opsec": "passive", + "opsecNote": "Traffic is routed through a decentralized overlay, reducing direct source attribution.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "I2P Anonymous Network (T)", "type": "url", - "url": "https://geti2p.net/en/" + "url": "https://i2p.net/", + "description": "I2P is an anonymous overlay network supporting eepsites, messaging, and peer-to-peer services.", + "status": "live", + "pricing": "free", + "bestFor": "Accessing and hosting services inside the I2P anonymity network", + "input": "Local I2P router traffic and destination lookups", + "output": "Anonymized in-network service access", + "opsec": "passive", + "opsecNote": "Garlic routing and distributed peers obscure endpoint relationships.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5885,37 +5975,142 @@ { "name": "OnionScan", "type": "url", - "url": "https://github.com/s-rah/onionscan" + "url": "https://github.com/s-rah/onionscan", + "description": "Open-source scanner for .onion services that identifies metadata leaks and potential OPSEC weaknesses.", + "status": "live", + "pricing": "free", + "bestFor": "Assessing exposed metadata and weak configurations on hidden services", + "input": ".onion targets", + "output": "Scan findings and metadata leak indicators", + "opsec": "active", + "opsecNote": "Direct probing of hidden services can be logged and may alert target operators.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "TorBot", "type": "url", - "url": "https://github.com/DedSecInside/TorBot" + "url": "https://github.com/DedSecInside/TorBot", + "description": "Python-based crawler for discovering and indexing .onion links and related metadata.", + "status": "live", + "pricing": "free", + "bestFor": "Automated dark web crawling and onion link collection", + "input": "Seed onion links and crawl configuration", + "output": "Crawled onion pages, discovered links, and metadata", + "opsec": "active", + "opsecNote": "Crawling generates repeated target requests that can be detected by destination services.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Tor Scan", "type": "url", - "url": "https://www.torscan.io/" + "url": "https://www.torscan.io/", + "description": "Legacy or ambiguous dark web scanning entry with unclear maintenance and uncertain distinction from OnionScan.", + "status": "degraded", + "pricing": "free", + "bestFor": "Legacy reference for Tor scanning workflows pending mapping cleanup", + "input": ".onion targets", + "output": "Potential scan intelligence when service is available", + "opsec": "active", + "opsecNote": "Any scan-style use is active probing and may expose investigator patterns.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true }, { "name": "Onioff", "type": "url", - "url": "https://github.com/k4m4/onioff" + "url": "https://github.com/k4m4/onioff", + "description": "Onion URL inspection utility for checking reachability and extracting metadata from hidden service links.", + "status": "live", + "pricing": "free", + "bestFor": "Quick inspection of onion links and service metadata", + "input": ".onion URLs", + "output": "Link metadata and availability information", + "opsec": "active", + "opsecNote": "Inspection requests contact target onion services through Tor and can be observed by targets.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Hunchly Hidden Services Report", "type": "url", - "url": "https://darkweb.hunch.ly/" + "url": "https://darkweb.hunch.ly/", + "description": "Daily feed of newly observed hidden services and associated monitoring data from Hunchly.", + "status": "live", + "pricing": "free", + "bestFor": "Monitoring new hidden-service discovery trends", + "input": "Feed queries and subscription requests", + "output": "Hidden service report data and update feeds", + "opsec": "passive", + "opsecNote": "Primarily consumes third-party aggregated reporting rather than probing targets directly.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "docker-onion-nmap (T)", "type": "url", - "url": "https://github.com/milesrichardson/docker-onion-nmap" + "url": "https://github.com/milesrichardson/docker-onion-nmap", + "description": "Dockerized nmap/proxychains workflow for enumerating exposed ports on onion services through Tor.", + "status": "degraded", + "pricing": "free", + "bestFor": "Containerized port enumeration of hidden services", + "input": ".onion hosts", + "output": "Network scan results and open-port findings", + "opsec": "active", + "opsecNote": "Port scanning is high-signal active probing and is likely visible to target operators.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true }, { "name": "Onion Investigator", "type": "url", - "url": "https://oint.ctrlbox.com/" + "url": "https://oint.ctrlbox.com/", + "description": "Ambiguous investigation entry with limited current validation and unclear relation to other onion analysis tools.", + "status": "degraded", + "pricing": "free", + "bestFor": "Legacy onion investigation reference pending mapping decision", + "input": "Unknown", + "output": "Unknown", + "opsec": "unknown", + "opsecNote": "Insufficient current evidence on operating model; treat as potentially active until clarified.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true } ] }, @@ -5926,12 +6121,42 @@ { "name": "Onion Cab", "type": "url", - "url": "https://onion.cab/" + "url": "https://onion.cab/", + "description": "Dark web search/directory endpoint with intermittent reliability and limited contemporary documentation.", + "status": "degraded", + "pricing": "free", + "bestFor": "Supplemental onion discovery when primary search tools miss coverage", + "input": "Keywords and category browsing", + "output": "Directory-style onion link listings", + "opsec": "passive", + "opsecNote": "Directory browsing is generally passive, but gateway logging policies are often opaque.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Ahmia", "type": "url", - "url": "https://ahmia.fi/" + "url": "https://ahmia.fi/", + "description": "Well-known Tor search engine indexing onion services with clearnet accessibility for discovery workflows.", + "status": "live", + "pricing": "free", + "bestFor": "Primary onion search and service discovery", + "input": "Search keywords", + "output": "Indexed onion search results", + "opsec": "passive", + "opsecNote": "Query activity is mediated by Ahmia rather than direct probing of each destination.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5942,19 +6167,64 @@ { "name": "Hidden Wiki", "type": "url", - "url": "https://thehiddenwiki.org/" + "url": "https://thehiddenwiki.org/", + "description": "Historically popular onion directory with variable trustworthiness, mirror churn, and high link rot.", + "status": "down", + "pricing": "free", + "bestFor": "Historical reference for onion directory structures", + "input": "Category browsing", + "output": "Curated onion link lists when accessible", + "opsec": "passive", + "opsecNote": "Directory browsing is passive, but listed links often carry high operational risk.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true } ] }, { "name": "Web O Proxy", "type": "url", - "url": "https://weboproxy.com/" + "url": "https://weboproxy.com/", + "description": "Web-based onion proxy/gateway style entry with uncertain current reliability and attribution risk.", + "status": "degraded", + "pricing": "free", + "bestFor": "Legacy gateway access reference for onion destinations", + "input": ".onion URLs", + "output": "Gateway-mediated onion page access", + "opsec": "unknown", + "opsecNote": "Gateway models can expose user IP/activity to operators; treat as high-risk unless verified.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true }, { "name": "IACA Dark Web Investigation Support", "type": "url", - "url": "https://iaca-darkweb-tools.com/" + "url": "https://iaca-darkweb-tools.com/", + "description": "International Anti Crime Academy dark web investigation support portal for federated search workflows.", + "status": "live", + "pricing": "free", + "bestFor": "Federated dark web investigation support and discovery", + "input": "Keywords and investigative query terms", + "output": "Aggregated search intelligence", + "opsec": "passive", + "opsecNote": "Primarily query-mediated discovery; avoid entering sensitive operational indicators into shared portals.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] },