List of Onion Sites

Verified Tor Search Engines and Directories

Finding reliable onion sites can be challenging. The following search engines and directories are verified and regularly updated, providing access to various hidden services on the Tor network.

Primary Search Engines and Directories

1. Ahmia
   Ahmia indexes .onion sites and offers a search feature. It also provides a clear interface to browse hidden services.

2. Not Evil
   Not Evil is a search engine that focuses on indexing a wide range of onion services. It aims to provide a user-friendly experience.

3. The Hidden Wiki
   The Hidden Wiki is a directory of onion sites categorized by themes. It is a good starting point for discovering various services.

4. DuckDuckGo (onion version)
   DuckDuckGo has an onion version that allows users to search the web privately. It indexes both .onion and clear web sites.

5. TorLinks
   TorLinks offers a categorized listing of onion services. It includes various topics, from forums to marketplaces.

Protocol Notes

Version 3 onion addresses consist of 56 characters because they contain a full Ed25519 public key. This structure enhances security and anonymity compared to the deprecated version 2 addresses, which only contained 16 characters (1).

When accessing v3 onion services, keep in mind that client authorization is based on an asymmetric key pair using the X25519 algorithm. Service operators must place client public keys in the authorized_clients directory for access (2).

For enhanced security, consider using the Tor Browser's 'Safest' security level. This setting disables JavaScript by default, minimizing risks associated with deanonymization (3). Be cautious when opening external documents, as this could leak your real IP address (4).

Using these tools and adhering to best practices will help you navigate the Tor network more effectively.

Secure Communication and Messaging Services

Reliable end-to-end encrypted messaging platforms hosted as onion services ensure secure communication over the Tor network. These services utilize advanced encryption protocols to protect user data and maintain anonymity.

Recommended Onion Messaging Services

1. Signal (onion version)
   Signal provides end-to-end encryption for messages and calls. The onion version enhances privacy by routing traffic through the Tor network.

2. Ricochet
   Ricochet enables anonymous messaging using a unique .onion address for each user. It operates without a central server, enhancing security.

3. Session
   Session is a decentralized messaging application that uses onion routing. It does not require phone numbers or email addresses for registration.

Technical Parameters for Client-Side Configuration

When using these services, specific configurations enhance security:

• Using the Tor Browser: Always access onion services through the Tor Browser to ensure traffic is routed correctly.

• Security Level Settings: Set the Tor Browser to 'Safest' security level. This disables JavaScript by default, which mitigates potential deanonymization risks (3).

• Client Authorization: For services that require client authorization, generate an asymmetric key pair using the X25519 algorithm. Place your public key in the authorized_clients directory as needed (2).

Important Considerations

Be aware of the following:

• Document Handling: Avoid opening external documents while using Tor. This can trigger applications that may leak your IP address (4).

• Service Selection: Choose services that utilize the latest onion v3 addresses, which consist of 56 characters and contain a full Ed25519 public key. This enhances security compared to deprecated v2 addresses (1).

Utilizing these messaging platforms with proper configuration will enhance your secure communication on the Tor network.

Privacy-Focused Information and News Outlets

Several mainstream and independent journalism portals maintain official onion mirrors. These sites prioritize user privacy and provide access to news and information that may be censored in certain regions. Accessing these resources often requires an understanding of the security features inherent in the Tor network.

Notable Onion News Outlets

1. ProPublica
   ProPublica operates an onion site that allows users to access investigative journalism while preserving anonymity. This site uses a v3 onion address, ensuring the highest level of security available.

2. The Guardian
   The Guardian offers an onion mirror for readers seeking reliable news coverage. This mirror is designed to bypass censorship and protect user privacy.

3. The Intercept
   The Intercept's onion site focuses on in-depth reporting and analysis. It provides a secure platform for users concerned about surveillance.

4. Global Voices
   Global Voices maintains an onion version to share stories from around the world, emphasizing the importance of diverse voices in journalism.

Ensuring Authenticity

To verify the authenticity of onion mirrors, consider the following approaches:

• Cryptographic Verification: Many reputable sites provide cryptographic signatures for their onion addresses. Check the official website for a checksum or GPG signature associated with the onion address.

• Official Announcements: Regularly check the official channels of these news outlets for announcements regarding their onion sites. This can help confirm that you are accessing the correct and secure addresses.

• Community Feedback: Engage with communities focused on the Tor network to gather insights about the reliability of these onion mirrors.

Technical Considerations

When accessing news outlets over Tor, adhere to these best practices:

• Use the Tor Browser: Always use the Tor Browser to connect to onion sites. This ensures that your traffic is routed securely through the Tor network.

• Enable Security Features: Set the Tor Browser to its 'Safest' security level to disable JavaScript by default, reducing the risk of deanonymization (3).

• Stay Informed: Be aware of the deprecation of v2 onion services. Only use v3 onion addresses for enhanced security and anonymity (1).

Following these guidelines will help you navigate privacy-focused information and news outlets effectively while maintaining your anonymity on the Tor network.

Technical Documentation and Repository Mirrors

Onion-hosted technical libraries, RFC archives, and software repositories provide essential resources for system administrators and network engineers. These services ensure that you can access technical documentation and software securely while maintaining your privacy.

Notable Onion Repositories

1. GitHub Onion Mirror
   An onion service that mirrors popular GitHub repositories. It allows users to download source code securely. Always verify the integrity of downloaded binaries using checksums provided in the repository.

2. RFC Archive
   This service hosts a collection of Request for Comments (RFC) documents. Accessing this archive allows you to stay up-to-date on internet standards and protocols.

3. Stem Library
   The Stem library provides a Python controller library for Tor. It allows developers to interact with Tor's control protocol through a secure connection.

4. Debian Onion Repository
   This repository offers Debian packages as onion services. Users can download and install packages while ensuring their privacy.

Integrity Hashing for Downloaded Binaries

When downloading software from onion services, verifying the integrity of binaries is crucial. Follow these steps:

• Check Hashes: Always compare the hash of the downloaded file with the one provided on the site. This ensures that the file has not been tampered with.

• Use GPG Signatures: Some repositories provide GPG signatures for their binaries. Verify these signatures to ensure authenticity.

• Secure Connections: Always use the Tor Browser to access these services. This helps to preserve your anonymity and protect against potential attacks.

Best Practices

• Update Regularly: Keep your software and libraries up-to-date to mitigate vulnerabilities.

• Use Version 3 Onion Addresses: Ensure you are accessing v3 onion services for enhanced security, as these addresses consist of 56 characters and include a full Ed25519 public key.

• Avoid External Links: Be cautious when opening files or links that may redirect you outside the Tor network. This can expose your real IP address (4).

By utilizing these onion-hosted resources and adhering to best practices for integrity verification, you can enhance your technical research and software management while maintaining privacy on the Tor network.

Network Diagnostics and Metadata Lookup Services

To effectively inspect hidden service descriptors, reachability, and cryptographic metadata, several tools are available. These tools allow you to gather information without executing arbitrary client-side code, which can pose security risks.

Key Tools and Their Functions

1. Tor Daemon (tor)
   The Tor daemon enables you to interact with the Tor network. It can provide information about hidden services and their descriptors, allowing you to analyze the structure and accessibility of onion services.

2. stem Library
   This Python library helps you communicate with the Tor network. It allows you to obtain information about hidden services, including their descriptors and reachability status. You can use stem to automate queries about specific onion services.

3. Onion Service Descriptor Inspection
   Hidden service descriptors contain essential information about an onion service, including its public key and introduction points. Inspecting these descriptors can help you verify the service's authenticity and security configuration.

Checking Reachability

To check if an onion service is reachable, you can perform a reachability test. This involves attempting to connect to the service and analyzing the response. Conditions affecting reachability could include:

• Service Downtime: The onion service may be offline or experiencing issues.

• Network Configuration: Firewalls or network policies may block access to the Tor network.

• Incorrect Address: Ensure that you are using the correct v3 onion address, which consists of 56 characters and contains a full Ed25519 public key.

Cryptographic Metadata Analysis

Analyzing the cryptographic metadata of onion services is crucial for verifying their security. For v3 onion services, client authorization relies on an asymmetric key pair using the X25519 algorithm. The service operator must place the client's public key in the authorized_clients directory (2). This method enhances security compared to legacy v2 services, which were deprecated in July 2021 (1).

Best Practices for Using Diagnostic Tools

• Use a Secure Environment: Always operate within the Tor Browser or a secure system to prevent IP leaks. The Tor Browser's 'Safest' security level disables JavaScript, reducing the risk of deanonymization (3).

• Caution with External Links: Be wary of opening external documents or links while using Tor. This can trigger applications that may leak your real IP address (4).

• Stay Informed: Keep updated on the status of onion services and their descriptors through community forums or official announcements.

Utilizing these tools effectively will enhance your ability to navigate and analyze the Tor network securely.

Operational Security Protocol for System Engineers

Accessing onion sites requires strict operational security protocols to protect your identity and data. Here are essential practices for system engineers.

Isolate the Tor Daemon

Run the Tor daemon in a dedicated environment. This can be a virtual machine or a separate physical device. Isolation minimizes the risk of leaking your real IP address through other applications. Ensure that the Tor daemon is configured to use a SOCKS5 proxy for all outgoing connections.

Disable JavaScript

Always set the Tor Browser to 'Safest' security level. This setting disables JavaScript by default, which helps mitigate severe deanonymization risks and browser exploits (3). JavaScript can be a vector for attacks that compromise your anonymity.

Manage Circuit Lifetimes

Regularly refresh your Tor circuits. You can do this by clicking "New Tor Circuit for this Site" in the Tor Browser. This practice helps avoid long-term correlation attacks. Aim to refresh circuits every 30–60 minutes, especially when accessing sensitive onion services.

Avoid External Document Handling

Never open external documents while using Tor. Downloading PDFs or DOC files can trigger helper applications that might leak your IP address by accessing the clear web (4). Always use caution and verify the source of any files.

Use v3 Onion Services

Focus on accessing v3 onion services, which are more secure than legacy v2 addresses. Version 3 onion addresses consist of 56 characters and include a full Ed25519 public key. Since July 2021, v2 services are deprecated and unsupported, and using them poses security risks (1).

Client Authorization for Services

For onion services requiring client authorization, create an asymmetric key pair using the X25519 algorithm. Place your public key in the authorized_clients directory to gain access. This method enhances security by ensuring only authorized clients can connect (2).

Summary of Best Practices

• Isolate Tor daemon in a secure environment.

• Disable JavaScript in Tor Browser.

• Refresh circuits regularly.

• Avoid opening external documents.

• Use v3 onion addresses exclusively.

• Implement client authorization for secure access.

Following these protocols will help maintain your operational security when accessing onion sites.

Cryptographic Verification of Onion v3 Addresses

To understand the cryptographic verification of v3 onion addresses, it’s essential to recognize how these addresses are structured. Version 3 onion addresses consist of 56 characters. This length is due to their inclusion of a full Ed25519 public key, unlike legacy version 2 addresses, which only contained a 16-character hash of a public key.

Mapping Ed25519 Public Keys to v3 Addresses

The mapping from Ed25519 public keys to v3 onion addresses occurs as follows:

1. Generate an Ed25519 Key Pair: You must create an Ed25519 key pair. This involves generating both a public and a private key.

2. Derive the v3 Address: The public key is then encoded using Base32, resulting in a 56-character v3 onion address. The process includes hashing the public key and appending specific identifiers to ensure uniqueness.

3. Format of v3 Addresses: The final v3 address will look like this: abcdefghijklmnopqrstuvwxyz0123456789.onion, where the first part represents the encoded public key.

Verifying Host Keys Locally

Verification of host keys is crucial for ensuring the authenticity of onion services. To verify host keys locally, follow these steps:

• Retrieve the Onion Service Descriptor: This descriptor contains the public key and other essential information about the service.

• Check the Public Key: Compare the public key from the descriptor with the Ed25519 public key you have. This ensures that you are connecting to the correct service.

• Use Cryptographic Libraries: Utilize libraries like the Stem library, which allows you to interact with the Tor network programmatically. Stem can help you fetch hidden service descriptors and validate the public keys.

Key Considerations

• Client Authorization: For services requiring client authorization, utilize an asymmetric key pair with the X25519 algorithm. The service operator must place the client’s public key in the authorized_clients directory (2).

• Security Practices: Always ensure you are using v3 onion addresses. Since version 2 services have been deprecated and unsupported since July 2021, using v3 addresses is essential for maintaining security and anonymity (1).

By following these guidelines, you can effectively verify the cryptographic integrity of onion services and enhance your security while navigating the Tor network.

Summary and Next Steps

• Verify All Cryptography: Always check Ed25519 public keys and validate v3 onion descriptors before trusting a hidden service.

• Maintain Strict Isolation: Keep your Tor daemon separated in a secure environment and disable JavaScript completely in your browser (3).

• Avoid Cleartext Leaks: Never open external documents or click clear web links that can expose your real IP address (4).

To continue your research on network infrastructure and directory structures, check out the List of Dark Web Sites.