Skip to content

Latest commit

 

History

History
62 lines (42 loc) · 2.32 KB

methods.md

File metadata and controls

62 lines (42 loc) · 2.32 KB
Raw

Twitter

Search for ransomware related resources on the dark web

(url:onion) "ransomware"

ransomware AND (url:onion -filter:retweets)

(hxxp:// OR http://) [.] AND url:onion

Search for PoC of vulnerabilities

PoC and CVE-20xx-xxxxx

Search for leaks on pastebin or ghostbin

target OR dump OR combo OR password OR leak OR breach OR databreach OR credential OR steal AND (url:pastebin.com OR url:ghostbin.co)

Google

Search for onion sites on AnonFiles shared intext:.onion site:anonfiles.com

Search for vulnerability PoC in GitHub CVE-20xx-xxxxx site:GitHub.com

Shodan

Use these filters: ssl:".onion" ".onion" "linkxyz.onion"

Interesting urls

r/onions on reddit In an article at Neteye blog we can see how to perform an analysis of a site present on the Dark Web

Other

How to download large files from Tor or anonymize yourself while downloading files

  • Install torsocks sudo apt install torsocks
  • Use torsocks chained with wget torsocks wget --tries=0 --retry-connrefused --retry-on-host-error -retry-on-http-error=500,502 --continue --timeout=90 --progress=bar --show-progress --random-wait --append-output=/tmp/wget_background <YOUR DOWNLOAD LINK>

How to download files via cmdline from Raidforums

  • On your favorite browser go to raidforums website
  • Open developer tools (for firefox CTRL+SHIFT+i)
  • Go to network (if no data do CTRL+r to reload)
  • Right click on a request and copy cURL (this cURL should contain your session cookies)
  • Paste copied on your favorite text editor
  • Replace url with download link (usually it's something like https://db.raidforums.com/z/down.php?id=259554)
  • Append --output to your cURL cmd with a filename like (curl ... --output thisisatest.7z)
  • Enjoy

Search for invitation links

Thanks to IntelligenceX