onionscout 0.1.4__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. onionscout-0.1.4/LICENSE +21 -0
  2. onionscout-0.1.4/PKG-INFO +235 -0
  3. onionscout-0.1.4/README.md +199 -0
  4. onionscout-0.1.4/onionscout.egg-info/PKG-INFO +235 -0
  5. onionscout-0.1.4/onionscout.egg-info/SOURCES.txt +10 -0
  6. onionscout-0.1.4/onionscout.egg-info/dependency_links.txt +1 -0
  7. onionscout-0.1.4/onionscout.egg-info/entry_points.txt +2 -0
  8. onionscout-0.1.4/onionscout.egg-info/requires.txt +8 -0
  9. onionscout-0.1.4/onionscout.egg-info/top_level.txt +1 -0
  10. onionscout-0.1.4/onionscout.py +2050 -0
  11. onionscout-0.1.4/pyproject.toml +61 -0
  12. onionscout-0.1.4/setup.cfg +4 -0
onionscout-0.1.4/LICENSE ADDED
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2025 hoek
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.
onionscout-0.1.4/PKG-INFO ADDED
@@ -0,0 +1,235 @@
1
+ Metadata-Version: 2.4
2
+ Name: onionscout
3
+ Version: 0.1.4
4
+ Summary: CLI tool for auditing Tor hidden-service (.onion) security leaks and misconfigurations
5
+ Author: Hoek
6
+ License-Expression: MIT
7
+ Project-URL: Homepage, https://github.com/h0ek/onionscout
8
+ Project-URL: Repository, https://github.com/h0ek/onionscout
9
+ Project-URL: Issues, https://github.com/h0ek/onionscout/issues
10
+ Keywords: tor,onion,hidden-service,security,osint,audit,pentest,scanner
11
+ Classifier: Development Status :: 3 - Alpha
12
+ Classifier: Environment :: Console
13
+ Classifier: Intended Audience :: Information Technology
14
+ Classifier: Intended Audience :: System Administrators
15
+ Classifier: Operating System :: OS Independent
16
+ Classifier: Programming Language :: Python :: 3
17
+ Classifier: Programming Language :: Python :: 3.10
18
+ Classifier: Programming Language :: Python :: 3.11
19
+ Classifier: Programming Language :: Python :: 3.12
20
+ Classifier: Programming Language :: Python :: 3.13
21
+ Classifier: Topic :: Security
22
+ Classifier: Topic :: System :: Networking
23
+ Classifier: Topic :: Utilities
24
+ Requires-Python: >=3.10
25
+ Description-Content-Type: text/markdown
26
+ License-File: LICENSE
27
+ Requires-Dist: requests[socks]>=2.32.0
28
+ Requires-Dist: PySocks>=1.7.1
29
+ Requires-Dist: urllib3>=2.0.0
30
+ Requires-Dist: mmh3>=4.1.0
31
+ Requires-Dist: paramiko>=3.4.0
32
+ Requires-Dist: rich>=13.7.0
33
+ Requires-Dist: cryptography>=42.0.0
34
+ Requires-Dist: selectolax>=0.3.21
35
+ Dynamic: license-file
36
+
37
+ # onionscout
38
+
39
+ ![onionscout](https://raw.githubusercontent.com/h0ek/onionscout/refs/heads/main/onionscout.webp)
40
+
41
+ **onionscout** is a lightweight CLI tool for auditing Tor hidden services (`.onion`) for common security misconfigurations, clearnet dependencies, metadata leaks, fingerprinting indicators, and basic de-anonymization risks.
42
+
43
+ It is designed as a first-pass audit helper, not a full penetration-testing framework.
44
+
45
+ > Use only against systems you own or are authorized to assess.
46
+
47
+ ## Features
48
+
49
+ ### Network and origin handling
50
+
51
+ - Tor SOCKS5h support
52
+ - smart HTTP/HTTPS origin selection
53
+ - `.onion`-safe redirect policy
54
+ - redirect leak detection to clearnet
55
+ - retry handling for common onion/Tor network errors
56
+ - separate HTTP, SSH, and TLS timeouts
57
+
58
+ ### Web fingerprinting
59
+
60
+ - web server header detection
61
+ - default error-page fingerprinting
62
+ - favicon discovery and Shodan-compatible favicon hash
63
+ - ETag extraction and Shodan query helper
64
+ - TLS reachability, TLS version, cipher, certificate SHA256, issuer, subject, and validity
65
+
66
+ ### Leak and de-anonymization checks
67
+
68
+ - clearnet redirects
69
+ - external active resources
70
+ - external links
71
+ - CSP / CSP-Report-Only external allowances
72
+ - Report-To / NEL / Link header leakage
73
+ - canonical / alternate / OpenGraph / Twitter metadata leaks
74
+ - protocol-relative external links
75
+ - meta-refresh redirects
76
+ - clearnet form actions
77
+ - clearnet WebSocket endpoints
78
+ - Onion-Location header
79
+ - proxy-related headers
80
+ - common fingerprinting headers
81
+
82
+ ### Hidden-service hygiene checks
83
+
84
+ - Apache `mod_status`
85
+ - Apache `mod_info`
86
+ - nginx `stub_status`
87
+ - WebDAV exposure
88
+ - common sensitive files and paths
89
+ - `.well-known/*` endpoints
90
+ - `robots.txt`
91
+ - `sitemap.xml`
92
+ - `security.txt` at root and `.well-known`
93
+ - CAPTCHA-related external resource leakage
94
+ - Set-Cookie attributes:
95
+ - Secure
96
+ - HttpOnly
97
+ - SameSite
98
+ - Domain
99
+
100
+ ### Content indicators
101
+
102
+ - minimal same-host crawler
103
+ - email extraction
104
+ - obfuscated email extraction, for example `name(at)domain(dot)tld`
105
+ - placeholder email separation, for example `example.com`
106
+ - BTC / ETH / XMR address indicators
107
+ - HTML comments review
108
+ - comment-based IP, URL, JWT, private key, and secret-candidate detection
109
+
110
+ ### Output
111
+
112
+ - human-readable Rich table
113
+ - JSON output for automation
114
+ - optional report file export
115
+
116
+ ## Requirements
117
+
118
+ - Python 3.10+
119
+ - Tor SOCKS proxy:
120
+ - Tor daemon: `127.0.0.1:9050`
121
+ - Tor Browser: `127.0.0.1:9150`
122
+ - Whonix Gateway example: `10.152.152.10:9050`
123
+
124
+ ## Installation
125
+
126
+ ### From PyPI
127
+
128
+ ```bash
129
+ pipx install onionscout
130
+ ```
131
+ ### From GitHub
132
+
133
+ ```
134
+ pipx install git+https://github.com/h0ek/onionscout.git
135
+ ```
136
+
137
+ For local development:
138
+
139
+ ```
140
+ git clone https://github.com/h0ek/onionscout.git
141
+ cd onionscout
142
+ python3 -m venv .venv
143
+ source .venv/bin/activate
144
+ python3 -m pip install -U pip
145
+ python3 -m pip install -e .
146
+ python3 onionscout.py -u <ONION_URL> --skip-tor-check
147
+ ```
148
+
149
+ ## Usage
150
+
151
+ ```
152
+ onionscout -u <ONION_URL>
153
+ ```
154
+
155
+ Example:
156
+
157
+ ```
158
+ onionscout -u http://exampleonionaddress.onion --skip-tor-check
159
+ ```
160
+
161
+ Use Tor Browser SOCKS:
162
+
163
+ ```
164
+ onionscout -u http://exampleonionaddress.onion --socks 127.0.0.1:9150 --skip-tor-check
165
+ ```
166
+
167
+ Force HTTP:
168
+
169
+ ```
170
+ onionscout -u exampleonionaddress.onion --scheme http
171
+ ```
172
+
173
+ Force HTTPS:
174
+
175
+ ```
176
+ onionscout -u exampleonionaddress.onion --scheme https --insecure-https
177
+ ```
178
+
179
+ Save TXT report:
180
+
181
+ ```
182
+ onionscout -u exampleonionaddress.onion -o report.txt
183
+ ```
184
+
185
+ Save JSON report:
186
+
187
+ ```
188
+ onionscout -u exampleonionaddress.onion --json -o report.json
189
+ ```
190
+
191
+ Disable crawler:
192
+
193
+ ```
194
+ onionscout -u exampleonionaddress.onion --no-crawl
195
+ ```
196
+
197
+ Tune crawler:
198
+
199
+ ```
200
+ onionscout -u exampleonionaddress.onion --max-urls 150 --depth 2
201
+ ```
202
+
203
+ Tune timeouts:
204
+
205
+ ```
206
+ onionscout -u exampleonionaddress.onion --http-timeout 20 --ssh-timeout 8 --tls-timeout 12
207
+ ```
208
+
209
+ ## Options
210
+
211
+ ```
212
+ -u, --url Target .onion URL
213
+ --scheme Origin scheme mode: auto, http, https
214
+ --socks SOCKS5h proxy, default 127.0.0.1:9050
215
+ --skip-tor-check Skip check.torproject.org connectivity check
216
+ --http-timeout HTTP timeout
217
+ --ssh-timeout SSH timeout
218
+ --tls-timeout TLS timeout
219
+ --ssh-port SSH port for fingerprint check
220
+ --retries Retries for transient onion/Tor errors
221
+ --cookie Raw Cookie header
222
+ --insecure-https Disable HTTPS certificate verification for HTTP requests
223
+ --no-crawl Disable crawler-based checks
224
+ --max-urls Crawler URL limit
225
+ --depth Crawler depth
226
+ --json Output JSON
227
+ -o, --output Save report to file
228
+ ```
229
+
230
+ ## Notes
231
+
232
+ - Most onion services use plain HTTP internally; HTTPS is supported when present.
233
+ - In `auto` mode, onionscout tests available origins and chooses a working HTTP or HTTPS origin.
234
+ - Redirects are followed only when they stay on `.onion`; clearnet redirects are reported as leaks.
235
+ - Some findings are context-dependent. For example, public social links may be intentional, while active clearnet scripts are usually more relevant for anonymity risk.
onionscout-0.1.4/README.md ADDED
@@ -0,0 +1,199 @@
1
+ # onionscout
2
+
3
+ ![onionscout](https://raw.githubusercontent.com/h0ek/onionscout/refs/heads/main/onionscout.webp)
4
+
5
+ **onionscout** is a lightweight CLI tool for auditing Tor hidden services (`.onion`) for common security misconfigurations, clearnet dependencies, metadata leaks, fingerprinting indicators, and basic de-anonymization risks.
6
+
7
+ It is designed as a first-pass audit helper, not a full penetration-testing framework.
8
+
9
+ > Use only against systems you own or are authorized to assess.
10
+
11
+ ## Features
12
+
13
+ ### Network and origin handling
14
+
15
+ - Tor SOCKS5h support
16
+ - smart HTTP/HTTPS origin selection
17
+ - `.onion`-safe redirect policy
18
+ - redirect leak detection to clearnet
19
+ - retry handling for common onion/Tor network errors
20
+ - separate HTTP, SSH, and TLS timeouts
21
+
22
+ ### Web fingerprinting
23
+
24
+ - web server header detection
25
+ - default error-page fingerprinting
26
+ - favicon discovery and Shodan-compatible favicon hash
27
+ - ETag extraction and Shodan query helper
28
+ - TLS reachability, TLS version, cipher, certificate SHA256, issuer, subject, and validity
29
+
30
+ ### Leak and de-anonymization checks
31
+
32
+ - clearnet redirects
33
+ - external active resources
34
+ - external links
35
+ - CSP / CSP-Report-Only external allowances
36
+ - Report-To / NEL / Link header leakage
37
+ - canonical / alternate / OpenGraph / Twitter metadata leaks
38
+ - protocol-relative external links
39
+ - meta-refresh redirects
40
+ - clearnet form actions
41
+ - clearnet WebSocket endpoints
42
+ - Onion-Location header
43
+ - proxy-related headers
44
+ - common fingerprinting headers
45
+
46
+ ### Hidden-service hygiene checks
47
+
48
+ - Apache `mod_status`
49
+ - Apache `mod_info`
50
+ - nginx `stub_status`
51
+ - WebDAV exposure
52
+ - common sensitive files and paths
53
+ - `.well-known/*` endpoints
54
+ - `robots.txt`
55
+ - `sitemap.xml`
56
+ - `security.txt` at root and `.well-known`
57
+ - CAPTCHA-related external resource leakage
58
+ - Set-Cookie attributes:
59
+ - Secure
60
+ - HttpOnly
61
+ - SameSite
62
+ - Domain
63
+
64
+ ### Content indicators
65
+
66
+ - minimal same-host crawler
67
+ - email extraction
68
+ - obfuscated email extraction, for example `name(at)domain(dot)tld`
69
+ - placeholder email separation, for example `example.com`
70
+ - BTC / ETH / XMR address indicators
71
+ - HTML comments review
72
+ - comment-based IP, URL, JWT, private key, and secret-candidate detection
73
+
74
+ ### Output
75
+
76
+ - human-readable Rich table
77
+ - JSON output for automation
78
+ - optional report file export
79
+
80
+ ## Requirements
81
+
82
+ - Python 3.10+
83
+ - Tor SOCKS proxy:
84
+ - Tor daemon: `127.0.0.1:9050`
85
+ - Tor Browser: `127.0.0.1:9150`
86
+ - Whonix Gateway example: `10.152.152.10:9050`
87
+
88
+ ## Installation
89
+
90
+ ### From PyPI
91
+
92
+ ```bash
93
+ pipx install onionscout
94
+ ```
95
+ ### From GitHub
96
+
97
+ ```
98
+ pipx install git+https://github.com/h0ek/onionscout.git
99
+ ```
100
+
101
+ For local development:
102
+
103
+ ```
104
+ git clone https://github.com/h0ek/onionscout.git
105
+ cd onionscout
106
+ python3 -m venv .venv
107
+ source .venv/bin/activate
108
+ python3 -m pip install -U pip
109
+ python3 -m pip install -e .
110
+ python3 onionscout.py -u <ONION_URL> --skip-tor-check
111
+ ```
112
+
113
+ ## Usage
114
+
115
+ ```
116
+ onionscout -u <ONION_URL>
117
+ ```
118
+
119
+ Example:
120
+
121
+ ```
122
+ onionscout -u http://exampleonionaddress.onion --skip-tor-check
123
+ ```
124
+
125
+ Use Tor Browser SOCKS:
126
+
127
+ ```
128
+ onionscout -u http://exampleonionaddress.onion --socks 127.0.0.1:9150 --skip-tor-check
129
+ ```
130
+
131
+ Force HTTP:
132
+
133
+ ```
134
+ onionscout -u exampleonionaddress.onion --scheme http
135
+ ```
136
+
137
+ Force HTTPS:
138
+
139
+ ```
140
+ onionscout -u exampleonionaddress.onion --scheme https --insecure-https
141
+ ```
142
+
143
+ Save TXT report:
144
+
145
+ ```
146
+ onionscout -u exampleonionaddress.onion -o report.txt
147
+ ```
148
+
149
+ Save JSON report:
150
+
151
+ ```
152
+ onionscout -u exampleonionaddress.onion --json -o report.json
153
+ ```
154
+
155
+ Disable crawler:
156
+
157
+ ```
158
+ onionscout -u exampleonionaddress.onion --no-crawl
159
+ ```
160
+
161
+ Tune crawler:
162
+
163
+ ```
164
+ onionscout -u exampleonionaddress.onion --max-urls 150 --depth 2
165
+ ```
166
+
167
+ Tune timeouts:
168
+
169
+ ```
170
+ onionscout -u exampleonionaddress.onion --http-timeout 20 --ssh-timeout 8 --tls-timeout 12
171
+ ```
172
+
173
+ ## Options
174
+
175
+ ```
176
+ -u, --url Target .onion URL
177
+ --scheme Origin scheme mode: auto, http, https
178
+ --socks SOCKS5h proxy, default 127.0.0.1:9050
179
+ --skip-tor-check Skip check.torproject.org connectivity check
180
+ --http-timeout HTTP timeout
181
+ --ssh-timeout SSH timeout
182
+ --tls-timeout TLS timeout
183
+ --ssh-port SSH port for fingerprint check
184
+ --retries Retries for transient onion/Tor errors
185
+ --cookie Raw Cookie header
186
+ --insecure-https Disable HTTPS certificate verification for HTTP requests
187
+ --no-crawl Disable crawler-based checks
188
+ --max-urls Crawler URL limit
189
+ --depth Crawler depth
190
+ --json Output JSON
191
+ -o, --output Save report to file
192
+ ```
193
+
194
+ ## Notes
195
+
196
+ - Most onion services use plain HTTP internally; HTTPS is supported when present.
197
+ - In `auto` mode, onionscout tests available origins and chooses a working HTTP or HTTPS origin.
198
+ - Redirects are followed only when they stay on `.onion`; clearnet redirects are reported as leaks.
199
+ - Some findings are context-dependent. For example, public social links may be intentional, while active clearnet scripts are usually more relevant for anonymity risk.
onionscout-0.1.4/onionscout.egg-info/PKG-INFO ADDED
@@ -0,0 +1,235 @@
1
+ Metadata-Version: 2.4
2
+ Name: onionscout
3
+ Version: 0.1.4
4
+ Summary: CLI tool for auditing Tor hidden-service (.onion) security leaks and misconfigurations
5
+ Author: Hoek
6
+ License-Expression: MIT
7
+ Project-URL: Homepage, https://github.com/h0ek/onionscout
8
+ Project-URL: Repository, https://github.com/h0ek/onionscout
9
+ Project-URL: Issues, https://github.com/h0ek/onionscout/issues
10
+ Keywords: tor,onion,hidden-service,security,osint,audit,pentest,scanner
11
+ Classifier: Development Status :: 3 - Alpha
12
+ Classifier: Environment :: Console
13
+ Classifier: Intended Audience :: Information Technology
14
+ Classifier: Intended Audience :: System Administrators
15
+ Classifier: Operating System :: OS Independent
16
+ Classifier: Programming Language :: Python :: 3
17
+ Classifier: Programming Language :: Python :: 3.10
18
+ Classifier: Programming Language :: Python :: 3.11
19
+ Classifier: Programming Language :: Python :: 3.12
20
+ Classifier: Programming Language :: Python :: 3.13
21
+ Classifier: Topic :: Security
22
+ Classifier: Topic :: System :: Networking
23
+ Classifier: Topic :: Utilities
24
+ Requires-Python: >=3.10
25
+ Description-Content-Type: text/markdown
26
+ License-File: LICENSE
27
+ Requires-Dist: requests[socks]>=2.32.0
28
+ Requires-Dist: PySocks>=1.7.1
29
+ Requires-Dist: urllib3>=2.0.0
30
+ Requires-Dist: mmh3>=4.1.0
31
+ Requires-Dist: paramiko>=3.4.0
32
+ Requires-Dist: rich>=13.7.0
33
+ Requires-Dist: cryptography>=42.0.0
34
+ Requires-Dist: selectolax>=0.3.21
35
+ Dynamic: license-file
36
+
37
+ # onionscout
38
+
39
+ ![onionscout](https://raw.githubusercontent.com/h0ek/onionscout/refs/heads/main/onionscout.webp)
40
+
41
+ **onionscout** is a lightweight CLI tool for auditing Tor hidden services (`.onion`) for common security misconfigurations, clearnet dependencies, metadata leaks, fingerprinting indicators, and basic de-anonymization risks.
42
+
43
+ It is designed as a first-pass audit helper, not a full penetration-testing framework.
44
+
45
+ > Use only against systems you own or are authorized to assess.
46
+
47
+ ## Features
48
+
49
+ ### Network and origin handling
50
+
51
+ - Tor SOCKS5h support
52
+ - smart HTTP/HTTPS origin selection
53
+ - `.onion`-safe redirect policy
54
+ - redirect leak detection to clearnet
55
+ - retry handling for common onion/Tor network errors
56
+ - separate HTTP, SSH, and TLS timeouts
57
+
58
+ ### Web fingerprinting
59
+
60
+ - web server header detection
61
+ - default error-page fingerprinting
62
+ - favicon discovery and Shodan-compatible favicon hash
63
+ - ETag extraction and Shodan query helper
64
+ - TLS reachability, TLS version, cipher, certificate SHA256, issuer, subject, and validity
65
+
66
+ ### Leak and de-anonymization checks
67
+
68
+ - clearnet redirects
69
+ - external active resources
70
+ - external links
71
+ - CSP / CSP-Report-Only external allowances
72
+ - Report-To / NEL / Link header leakage
73
+ - canonical / alternate / OpenGraph / Twitter metadata leaks
74
+ - protocol-relative external links
75
+ - meta-refresh redirects
76
+ - clearnet form actions
77
+ - clearnet WebSocket endpoints
78
+ - Onion-Location header
79
+ - proxy-related headers
80
+ - common fingerprinting headers
81
+
82
+ ### Hidden-service hygiene checks
83
+
84
+ - Apache `mod_status`
85
+ - Apache `mod_info`
86
+ - nginx `stub_status`
87
+ - WebDAV exposure
88
+ - common sensitive files and paths
89
+ - `.well-known/*` endpoints
90
+ - `robots.txt`
91
+ - `sitemap.xml`
92
+ - `security.txt` at root and `.well-known`
93
+ - CAPTCHA-related external resource leakage
94
+ - Set-Cookie attributes:
95
+ - Secure
96
+ - HttpOnly
97
+ - SameSite
98
+ - Domain
99
+
100
+ ### Content indicators
101
+
102
+ - minimal same-host crawler
103
+ - email extraction
104
+ - obfuscated email extraction, for example `name(at)domain(dot)tld`
105
+ - placeholder email separation, for example `example.com`
106
+ - BTC / ETH / XMR address indicators
107
+ - HTML comments review
108
+ - comment-based IP, URL, JWT, private key, and secret-candidate detection
109
+
110
+ ### Output
111
+
112
+ - human-readable Rich table
113
+ - JSON output for automation
114
+ - optional report file export
115
+
116
+ ## Requirements
117
+
118
+ - Python 3.10+
119
+ - Tor SOCKS proxy:
120
+ - Tor daemon: `127.0.0.1:9050`
121
+ - Tor Browser: `127.0.0.1:9150`
122
+ - Whonix Gateway example: `10.152.152.10:9050`
123
+
124
+ ## Installation
125
+
126
+ ### From PyPI
127
+
128
+ ```bash
129
+ pipx install onionscout
130
+ ```
131
+ ### From GitHub
132
+
133
+ ```
134
+ pipx install git+https://github.com/h0ek/onionscout.git
135
+ ```
136
+
137
+ For local development:
138
+
139
+ ```
140
+ git clone https://github.com/h0ek/onionscout.git
141
+ cd onionscout
142
+ python3 -m venv .venv
143
+ source .venv/bin/activate
144
+ python3 -m pip install -U pip
145
+ python3 -m pip install -e .
146
+ python3 onionscout.py -u <ONION_URL> --skip-tor-check
147
+ ```
148
+
149
+ ## Usage
150
+
151
+ ```
152
+ onionscout -u <ONION_URL>
153
+ ```
154
+
155
+ Example:
156
+
157
+ ```
158
+ onionscout -u http://exampleonionaddress.onion --skip-tor-check
159
+ ```
160
+
161
+ Use Tor Browser SOCKS:
162
+
163
+ ```
164
+ onionscout -u http://exampleonionaddress.onion --socks 127.0.0.1:9150 --skip-tor-check
165
+ ```
166
+
167
+ Force HTTP:
168
+
169
+ ```
170
+ onionscout -u exampleonionaddress.onion --scheme http
171
+ ```
172
+
173
+ Force HTTPS:
174
+
175
+ ```
176
+ onionscout -u exampleonionaddress.onion --scheme https --insecure-https
177
+ ```
178
+
179
+ Save TXT report:
180
+
181
+ ```
182
+ onionscout -u exampleonionaddress.onion -o report.txt
183
+ ```
184
+
185
+ Save JSON report:
186
+
187
+ ```
188
+ onionscout -u exampleonionaddress.onion --json -o report.json
189
+ ```
190
+
191
+ Disable crawler:
192
+
193
+ ```
194
+ onionscout -u exampleonionaddress.onion --no-crawl
195
+ ```
196
+
197
+ Tune crawler:
198
+
199
+ ```
200
+ onionscout -u exampleonionaddress.onion --max-urls 150 --depth 2
201
+ ```
202
+
203
+ Tune timeouts:
204
+
205
+ ```
206
+ onionscout -u exampleonionaddress.onion --http-timeout 20 --ssh-timeout 8 --tls-timeout 12
207
+ ```
208
+
209
+ ## Options
210
+
211
+ ```
212
+ -u, --url Target .onion URL
213
+ --scheme Origin scheme mode: auto, http, https
214
+ --socks SOCKS5h proxy, default 127.0.0.1:9050
215
+ --skip-tor-check Skip check.torproject.org connectivity check
216
+ --http-timeout HTTP timeout
217
+ --ssh-timeout SSH timeout
218
+ --tls-timeout TLS timeout
219
+ --ssh-port SSH port for fingerprint check
220
+ --retries Retries for transient onion/Tor errors
221
+ --cookie Raw Cookie header
222
+ --insecure-https Disable HTTPS certificate verification for HTTP requests
223
+ --no-crawl Disable crawler-based checks
224
+ --max-urls Crawler URL limit
225
+ --depth Crawler depth
226
+ --json Output JSON
227
+ -o, --output Save report to file
228
+ ```
229
+
230
+ ## Notes
231
+
232
+ - Most onion services use plain HTTP internally; HTTPS is supported when present.
233
+ - In `auto` mode, onionscout tests available origins and chooses a working HTTP or HTTPS origin.
234
+ - Redirects are followed only when they stay on `.onion`; clearnet redirects are reported as leaks.
235
+ - Some findings are context-dependent. For example, public social links may be intentional, while active clearnet scripts are usually more relevant for anonymity risk.
onionscout-0.1.4/onionscout.egg-info/SOURCES.txt ADDED
@@ -0,0 +1,10 @@
1
+ LICENSE
2
+ README.md
3
+ onionscout.py
4
+ pyproject.toml
5
+ onionscout.egg-info/PKG-INFO
6
+ onionscout.egg-info/SOURCES.txt
7
+ onionscout.egg-info/dependency_links.txt
8
+ onionscout.egg-info/entry_points.txt
9
+ onionscout.egg-info/requires.txt
10
+ onionscout.egg-info/top_level.txt
onionscout-0.1.4/onionscout.egg-info/entry_points.txt ADDED
@@ -0,0 +1,2 @@
1
+ [console_scripts]
2
+ onionscout = onionscout:main
onionscout-0.1.4/onionscout.egg-info/requires.txt ADDED
@@ -0,0 +1,8 @@
1
+ requests[socks]>=2.32.0
2
+ PySocks>=1.7.1
3
+ urllib3>=2.0.0
4
+ mmh3>=4.1.0
5
+ paramiko>=3.4.0
6
+ rich>=13.7.0
7
+ cryptography>=42.0.0
8
+ selectolax>=0.3.21