{"id":3174,"date":"2022-02-12T23:00:38","date_gmt":"2022-02-12T23:00:38","guid":{"rendered":"https:\/\/osintme.com\/?p=3174"},"modified":"2022-02-13T23:28:27","modified_gmt":"2022-02-13T23:28:27","slug":"darkweb-osint-investigations-resources-for-2022","status":"publish","type":"post","link":"https:\/\/osintme.com\/index.php\/2022\/02\/12\/darkweb-osint-investigations-resources-for-2022\/","title":{"rendered":"Darkweb OSINT investigations resources for 2022"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The end of 2021 saw big changes to the darkweb landscape – the V2 onion domain deprecation finally took place, rendering many older websites inaccessible.<\/p>

The Tor Project finally pulled the plug on the “fundamentally insecure” domains, urging both owners and users to migrate (you can read the full statement here<\/a>).<\/p>

The current version of the Tor browser no longer supports the old, 16 character string domain names – in favour of the longer, 56 character ones. It is still possible to access some of the V2 domains using an old, pre-update version of the Tor browser – however there isn’t much point, since the general consensus was to move on.<\/p>

This sadly means that many of the investigative resources I have published to date (examples here<\/a>, here<\/a> and here<\/a>) no longer work.<\/p>

The time has come to update the darkweb OSINT investigations toolkit and to include some contemporary 2022 material in it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"tor\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Clearnet resources<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Ahmia<\/a> – one of the oldest and most reliable .onion search engines, accessible both from the darknet and the clearnet.<\/p>

Onion Search Engine<\/a> – for searching onion sites. It comes with browser extensions for Chrome and Firefox. Various supported search options include images, videos, maps and pastes.<\/p>

Tor Taxi<\/a> – a launchpad website with links to multiple different onion domains. It has a handy colour-coded system for displaying websites that are currently down.<\/p>

Darkweb Wiki<\/a> – a somewhat chaotic and not frequently updated list of onion sites – still, a valuable resource.<\/p>

Hunchly<\/a> – provides daily darkweb reports of what onion domains are up \/ down, in the form of a spreadsheet.<\/p>

IACA Darkweb Tools<\/a> – free resources provided by the International Anti Crime Academy.<\/p>

Reddit communities<\/strong> – many subreddits dedicated to various aspects of the darkweb can be found, some of which are hit and miss. However, there are 3 that are consistently good and up to date:<\/p>

https:\/\/www.reddit.com\/r\/darknet\/<\/a><\/p>

https:\/\/www.reddit.com\/r\/TOR\/<\/a><\/p>

https:\/\/www.reddit.com\/r\/onions\/<\/a><\/p>

Discord<\/strong> – an up-and-coming alternative to Reddit for budding online communities and niche topics, Discord already dominates in some aspects. While I have not yet found a publicly available channel worthy of a recommendation, you can darknet-keyword search the available Discord servers<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Darknet resources<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Ahmia<\/strong> – as mentioned above, but specifically for Tor:<\/p>

http:\/\/juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion<\/a><\/p>

Haystak <\/strong>– the self appointed “darknet’s largest search engine”, with thousands of indexed .onion domains – including some historical ones.<\/p>

http:\/\/haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion\/<\/a><\/p>

Kilos<\/strong> – darknet market search engine allowing to search for vendors, listings, reviews, forums and forum posts. Useful for conducting broad keyword-based searches across multiple darkweb entities.<\/p>

http:\/\/mlyusr6htlxsyc7t2f4z53wdxh3win7q3qpxcrbam6jf3dmua7tnzuyd.onion\/search<\/a><\/p>

TOR66<\/strong> – on top of the standard search, this enables the “fresh onions” and “random onions” matches; tread with caution, these can bring you to some truly random sites.<\/p>

http:\/\/tor66sewebgixwhcqfnp5inzp5x5uohhdy3kvtnyfxc2e5mxiuh34iid.onion\/<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Github tools<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

First and foremost, awesome list of tools by Apurv Singh Gautam is available here<\/a> (but just a caveat, I have not used or tested all of those – yet).<\/p>

Onioff<\/a> – a Python tool for searching .onion URLs.<\/p>

Onion Ingestor<\/a> – for scraping and collecting darkweb intelligence – works with Kibana dashboards.<\/p>

Onion Search<\/a> – tool for scraping .onion URLs from darkweb search engines.<\/p>

The Devils Eye<\/a> – for extracting .onion site links and descriptions without connecting to Tor.<\/p>

TorBot<\/a> – onion crawler, with many additional features still in active development.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Bonus: Twitter accounts <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Examples of some darkweb related quality reporting, news, updates, commentaries and other resources can be found by following these accounts on Twitter (a non-exhaustive list):<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t