open-tor

Route Tor and .onion access workflows for dark web OSINT investigations.

73|8|Updated May 1, 2026
One-click install
npx skills add https://github.com/vichhka-git/OpenTor --skill open-tor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: open-tor
Source: https://github.com/vichhka-git/OpenTor/tree/main
Command: npx skills add https://github.com/vichhka-git/OpenTor --skill open-tor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests[socks], beautifulsoup4, python-dotenv, stem, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

OpenTor gives AI agents reliable access to Tor and .onion hidden services so they can investigate dark web activity without manually managing proxies, search engines, or page scraping.

Core Features & Use Cases

  • Dark Web Search: Query 12 Tor and clearnet search engines in parallel, deduplicate results, and rank them by relevance for faster investigation.
  • Targeted OSINT Workflows: Search for ransomware groups, leaked credentials, threat actors, and corporate exposure using mode-based engine selection and seed URLs.
  • Page Scraping and Entity Extraction: Fetch .onion pages through Tor, extract emails, domains, crypto addresses, PGP indicators, and other intelligence artifacts.
  • Export and Reporting: Format findings for downstream analysis in JSON, CSV, STIX 2.1, MISP, or human-readable text.

Quick Start

Ask OpenTor to verify Tor connectivity, run a focused dark web search, and fetch the most relevant .onion result for analysis.

Frequently Asked Questions about open-tor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scrape .onion pages and extract threat intelligence from the dark web?

Scraping .onion pages requires routing requests through a local Tor SOCKS proxy to fetch content, then extracting threat intelligence artifacts like emails, domains, and crypto addresses for OSINT investigations.

What is needed to search Tor hidden services safely with an AI agent?

To search Tor hidden services safely, you need a local Tor SOCKS proxy and ControlPort configured, plus Python dependencies like requests[socks], beautifulsoup4, python-dotenv, and stem.

Can I export dark web OSINT findings to STIX or MISP formats?

Yes, dark web OSINT findings can be exported to STIX 2.1, MISP, JSON, or CSV formats, allowing downstream analysis of scraped .onion pages and extracted threat intelligence artifacts.

How does dark web search handle multiple Tor search engines and deduplication?

Dark web search queries 12 Tor and clearnet search engines in parallel, deduplicates the results, and ranks them by relevance to accelerate ransomware monitoring and threat actor investigations.

What is the best way to monitor ransomware groups and leaked credentials on Tor?

The best way to monitor ransomware groups on Tor is using mode-based engine selection and seed URLs to execute targeted OSINT workflows across multiple dark web search engines and crawl targets.

Does dark web scraping apply content safety filtering for OSINT investigations?

Yes, dark web scraping applies content safety filtering during page fetching and entity extraction to ensure safe handling of intelligence artifacts retrieved from .onion hidden services.