Forked from s-rah/onionscan
OnionScan is a free and open source tool for investigating the Dark Web. For all
the amazing technological innovations in the anonymity and privacy space, there
is always a constant threat that has no effective technological patch - human
error. 
Whether it is operational security leaks or software misconfiguration - most often times the attacks on anonymity don't come from breaking the underlying systems, but from ourselves.
OnionScan has two primary goals:
-
We want to help operators of hidden services find and fix operational security issues with their services. We want to help them detect misconfigurations and we want to inspire a new generation of anonymity engineering projects to help make the world a more private place.
-
Secondly we want to help researchers and investigators monitor and track Dark Web sites. In fact we want to make this as easy as possible. Not because we agree with the goals and motives of every investigation force out there - most often we don't. But by making these kinds of investigations easy, we hope to create a powerful incentive for new anonymity technology (see goal #1)
go install github.com/415ALS/onionscanv3@latest
For a simple report detailing the high, medium and low risk areas found with a hidden service:
/home/username/go/bin/onionscanv3 --torProxyAddress=127.0.0.1:9150 notarealhiddenservice.onion
The most interesting output comes from the verbose option:
/home/username/go/bin/onionscanv3 --torProxyAddress=127.0.0.1:9150 --verbose notarealhiddenservice.onion
There is also a JSON output, if you want to integrate with another program or application:
/home/username/go/bin/onionscanv3 --torProxyAddress=127.0.0.1:9150 --jsonReport notarealhiddenservice.onion
More detailed documentation on usage can be found in doc.
A list of privacy and security problems which are detected by OnionScan can be found here.
You can also directly configure the types of scanning that onionscan does using the scans parameter.
./bin/onionscan --scans web notarealhiddenservice.onion
If you are a researcher monitoring multiple sites you will definitely want to use the OnionScan Correlation Lab - a web interface hosted by OnionScan that allows you to discover, search and tag different identity correlations.
You can find a full guide on the OnionScan correlation lab here.
