Leading dark-web search engine that indexes .onion sites. Public API available for programmatic queries. Also publishes a list of verified onion links.
Scrapes onion links from 9+ search engines (Ahmia, DarkSearch, Tor66, etc) in one CLI. Supports Tor proxy.
Dark-web crawler and search engine with a web UI. Indexes .onion pages and makes them searchable.
CLI tool that searches the deep web with a single command. Queries Ahmia and other engines via Tor.
Dark-web monitoring tool with search + screenshot capabilities. Tracks onion site changes over time.
Curated directory of dark-web investigation resources maintained by the International Anti-Crime Academy.
Search Engines
Clearnet-accessible search engine for .onion sites. No Tor required on the client side.
Search Engines
Tor66 Onion Link Discovery Fresh onion link directory updated daily. One of the longest-running onion link lists.
Onion Link Discovery
Onion service directory with category browsing and uptime statistics.
Onion Link Discovery
Clearnet directory of working .onion links organized by category. Accessible without Tor.
Onion Link Discovery
The reference scanner for .onion site security. Checks for misconfigurations, data leaks, and identifiable information.
Checks whether an onion site is online. Simple CLI that reports reachability and response time.
Runs Nmap scans against onion services through the Tor network in a Docker container.
Dark-web crawler with data extraction, page parsing, and custom module support. Python-based.
Lightweight Python crawler that spider .onion domains via Tor proxy. Saves HTML/JSON output.
Continuous dark-web monitoring framework. Crawled content is indexed and alertable.
Modular onion site ingestor - crawl, parse, and export structured data from dark-web pages.
Dark-web OSINT framework written in Go. Crawls .onion pages, extracts metadata, and generates reports.
Dark-web crawler with asynchronous architecture. Supports concurrent page scraping and content parsing.
Privacy-first dark-web scraper with proxy rotation and stealth techniques.
Curated collection of dark-web threat intelligence sources, tools, and reports. Excellent starting point.
AI-powered dark-web OSINT investigation tool. LLM-driven query refinement, multi-engine search, scrape, summarise.
Dark-web reconnaissance framework with modular plugins for data collection and analysis.
Commercial dark-web monitoring - leaked credentials, brand impersonation, forum mentions, ransomware leak sites.
Intel Platforms
Dark-web + clear-web threat monitoring. Covers Telegram, Discord, ransomware leak sites, paste sites.
Intel Platforms
Tracking thread listings and user activity across breach-forum marketplaces.
Forums & Markets
Monitors and archives ransomware leak-site postings. Indexes victim disclosures from 50+ groups.
Forums & Markets
IOC feed sourced from dark-web forums, ransomware leak sites, and Telegram channels.
Forums & Markets
Search across dark-web pages, paste sites, and leaked databases. Free tier with preview-only results.
Leak Databases
Credential search engine aggregating data from breach dumps and dark-web sources.
Leak Databases
Search leaked credentials and personal data from dark-web breach compilations.
Leak Databases
Database search engine covering thousands of breach compilations sourced from dark-web channels.
Leak Databases
The Tor network itself is the foundational layer. Tools in this directory require Tor for routing to .onion services.
Miscellaneous
Wraps any CLI tool so its traffic routes through Tor. Use with curl, nmap, git - any TCP-based tool.
Terminal-based Tor status monitor. Shows bandwidth, circuit paths, relay info in real time.
Modified Firefox hardened for .onion browsing. The standard gateway for manual dark-web investigation.
Miscellaneous