List of Onion Links

Verified Tor Directories and Search Engines

Finding reliable .onion services requires utilizing verified directories and search engines. Below is a list of functional and stable resources for navigating the Tor network.

The Hidden Wiki

The Hidden Wiki is a well-known directory for .onion links. It provides a categorized list of services, including forums, marketplaces, and blogs. The site is regularly updated by community members, ensuring that links are current. Users should verify links using tools like Onioff for active status.

Not Evil

Not Evil is a search engine specifically for .onion addresses. It indexes a wide range of content, from educational resources to illicit services. The search engine employs a simple interface, making it easy to find desired services. It uses a unique algorithm to ensure that only verified links are displayed.

Ahmia

Ahmia serves as a search engine and directory for .onion services. It emphasizes privacy and security, indexing only legal content. Ahmia also provides a Tor2Web gateway, allowing access to .onion sites via clearnet, though this compromises anonymity.

DuckDuckGo on Tor

DuckDuckGo operates a dedicated .onion service that allows users to search the clearnet while preserving privacy. The search engine does not track users and provides a secure browsing experience. It is a reliable option for users seeking information without revealing their identities.

Onion.link

Onion.link is another directory focused on .onion services. It offers a straightforward interface and categorizes links for easier navigation. Users can find various services, including social media and forums, while ensuring that links are functional.

Verification Status and Indexing Mechanics

Each directory employs different indexing mechanics. The Hidden Wiki relies on community submissions and regular updates. Not Evil uses automated algorithms to verify links, while Ahmia focuses solely on legal content. DuckDuckGo and Onion.link prioritize user privacy and link functionality.

When using these resources, remember to verify the status of .onion addresses. Tools like Onionprobe can help monitor uptime and performance. Avoid using clearnet uptime checkers, as they may result in immediate timeouts. For health checks, route requests through local SOCKS proxies using command-line tools like torsocks.

By utilizing these verified directories and search engines, you can effectively navigate the Tor network while minimizing risks associated with unverified links.

Secure Cryptographic Communication and Pastebins

Secure communication is essential for privacy-focused users operating within the Tor network. Below is a selection of secure, end-to-end encrypted messaging nodes, administrative pastebins, and decentralized communication channels hosted as onion services.

End-to-End Encrypted Messaging Nodes

1. SecureDrop
   SecureDrop is an open-source platform for secure communication between journalists and sources. It employs strong encryption and allows for anonymous file sharing. Users can access SecureDrop via its .onion address, ensuring privacy during interactions.

2. Ricochet
   Ricochet is a decentralized messaging application that utilizes Tor for secure messaging. It does not rely on centralized servers, ensuring that messages are transmitted directly between users via their unique .onion addresses.

3. Matrix
   Matrix is an open protocol for secure communications. Matrix rooms can be hosted as onion services, providing end-to-end encryption. Users can connect to these rooms through Tor, ensuring their communication remains private.

Administrative Pastebins

1. Pastebin
   Pastebin is a popular tool for sharing code snippets and text files securely. The Tor version allows users to create and share pastes anonymously. This is useful for administrators sharing sensitive information without revealing their identities.

2. 0bin
   0bin is a pastebin alternative that offers a zero-knowledge encryption model. All pastes are stored encrypted, and the server cannot access the content. It can be accessed via its .onion address, ensuring anonymity.

Decentralized Communication Channels

1. CJDNS
   CJDNS is a networking protocol that allows users to create decentralized networks. It can be utilized within the Tor network, enabling secure communication channels that do not rely on traditional ISPs.

2. I2P
   I2P is an anonymous network layer that allows for secure communication. It can be integrated with Tor, providing additional layers of encryption and anonymity for users seeking secure communication channels.

Operational Parameters

For secure communication within these nodes and services, ensure you are using v3 onion addresses. These addresses consist of 56 characters and provide enhanced security through embedded ed25519 public keys (2). Unlike legacy v2 services, v3 services utilize end-to-end encryption and protect user privacy through daily-rotated blinded public keys (2).

When accessing these services, remember that connecting requires establishing a 6-hop circuit through the Tor network (3). This enhances security but may introduce latency. Always verify the status of onion services using tools like Onionprobe or Onioff, ensuring they are operational before relying on them.

For administrators, configuring the MetricsPort and MetricsPortPolicy in the Tor daemon can enable secure scraping of node metrics (4). Avoid using standard clearnet uptime checkers, as they may lead to false negatives due to lack of Tor awareness.

By utilizing these secure communication tools and understanding their operational parameters, you can enhance your privacy and security while navigating the Tor network.

Open Source Intelligence (OSINT) and News Feeds

Accessing reliable news and OSINT resources through the Tor network is crucial for users seeking anonymity. Various mainstream press agencies and independent journalism platforms operate as onion services, offering secure access to information.

Mainstream Press Agencies

Many well-known news organizations maintain anonymous mirror sites on the Tor network. These sites provide users with access to articles and reports while preserving their privacy. Examples include:

• BBC: The BBC offers a .onion version, allowing users to access news without revealing their identity.

• The Guardian: This platform provides a secure way to read articles and stay updated on global events via its onion address.

These services utilize v3 onion addresses, which consist of 56 characters and embed a full ed25519 public key for enhanced security (2).

Independent Journalism Platforms

Several independent journalism platforms strive to provide uncensored news. These platforms often focus on investigative reporting and whistleblower protection. Examples include:

• ProPublica: An independent non-profit newsroom that offers its content on the Tor network, ensuring anonymous access to investigative journalism.

• The Intercept: Known for its focus on privacy and civil liberties, The Intercept has an onion service that allows users to read articles without tracking.

Threat Intelligence Repositories

In addition to news, the Tor network hosts various threat intelligence repositories. These repositories provide valuable insights into cybersecurity threats and vulnerabilities. Some notable examples are:

• ThreatCrowd: This platform aggregates threat intelligence data, allowing users to investigate IP addresses, domains, and other indicators of compromise.

• MalwareBazaar: A repository for malware samples, enabling researchers to analyze and study malware behavior anonymously.

Accessing and Verifying Onion Services

When accessing these onion services, you must ensure they are operational. Use tools like Onionprobe to monitor uptime and performance. Avoid standard clearnet uptime checkers as they may lead to connection timeouts.

For verifying specific .onion URLs, utilize Onioff, which inspects response codes through a local Tor instance. Always confirm that you are using the latest v3 onion addresses to benefit from stronger security measures.

By leveraging these anonymous resources, you can stay informed while maintaining your privacy on the Tor network.

Technical Documentation and Mirror Repositories

Accessing technical documentation and mirror repositories through the Tor network is essential for systems engineers and network administrators. Below is a catalog of onion-hosted resources that provide important technical materials, including RFCs, security whitepapers, software repositories, and developer documentation.

Technical RFCs and Standards

1. RFC Mirror
   This onion service hosts a collection of Request for Comments (RFC) documents. Users can access the latest networking standards and protocols anonymously.

2. IETF Drafts
   An onion mirror of Internet Engineering Task Force (IETF) drafts is available. This resource allows users to review ongoing work in the internet standards community.

Security Whitepapers

1. Security Research Archive
   This repository hosts various security whitepapers covering recent vulnerabilities, attack vectors, and mitigation strategies. Users can find valuable insights into cybersecurity trends.

2. Cryptography Papers
   An onion service dedicated to cryptographic research papers is accessible. This resource provides scholarly articles on advancements in cryptographic techniques and protocols.

Software Repositories

1. Open Source Software Archive
   This onion-hosted repository offers a wide range of open-source software packages. Users can download software while maintaining their anonymity.

2. Package Management Mirrors
   Several onion mirrors of popular package management systems exist. These mirrors provide access to updated software packages for various operating systems.

Developer Documentation

1. API Documentation
   An onion service provides comprehensive API documentation for various software libraries. Developers can access usage examples and integration guidelines securely.

2. Framework Guides
   This repository contains guides and tutorials for popular programming frameworks. Users can learn best practices and implementation strategies without revealing their identities.

Accessing and Verifying Resources

When accessing these onion services, ensure you are using v3 onion addresses, which consist of 56 characters and utilize enhanced security measures through embedded ed25519 public keys (2). Establishing a connection requires creating a 6-hop circuit through the Tor network, which may introduce some latency (3).

To verify the operational status of these resources, use tools like Onionprobe to monitor uptime and performance. Avoid using standard clearnet uptime checkers as they may result in connection timeouts due to lack of Tor awareness. Always confirm the availability of these services before relying on them for critical technical documentation.

By leveraging these onion-hosted resources, you can access essential technical information while maintaining privacy on the Tor network.

Network Diagnostics and Self-Test Nodes

Accessing reliable network diagnostics and self-test nodes is crucial for maintaining the integrity of your connections within the Tor network. These services allow you to check routing paths, exit node status, cryptographic handshake verifications, and connection latency.

Key Tools and Services

1. Onionprobe
   This official Tor-supported tool tests and monitors the availability and performance of onion services. It provides metrics on uptime and can export data to monitoring systems like Prometheus and Grafana.

2. Onioff
   An open-source Python utility for verifying the activity status of specific .onion URLs. It inspects response codes by routing requests through a local Tor instance, ensuring accurate results.

3. Health Check Scripts
   Executing health checks for .onion endpoints typically involves routing requests through local SOCKS proxies. Use command-line tools like torsocks combined with curl to perform these checks effectively.

Monitoring Considerations

When monitoring onion services, avoid using standard clearnet uptime checkers. These tools lack awareness of the internal Tor proxy, leading to immediate connection timeouts. Instead, focus on tools designed specifically for the Tor network.

Operational Parameters

To ensure effective monitoring, configure the Tor daemon's MetricsPort and MetricsPortPolicy parameters. This setup enables secure scraping of Prometheus-compatible node metrics (4). Establishing a connection to an onion service requires creating a 6-hop circuit through the Tor network, which may introduce latency (3).

Best Practices

1. Regularly verify the operational status of your onion services using Onionprobe or Onioff.

2. Utilize v3 onion addresses for enhanced security. These addresses consist of 56 characters and utilize embedded ed25519 public keys for improved privacy (2).

3. Conduct health checks through local SOCKS proxies to avoid connection issues.

By leveraging these network diagnostics and self-test nodes, you can maintain a robust and secure connection within the Tor network.

Infrastructure Health Verification and Link Rot Mitigation

Verifying the health of onion services is essential for maintaining reliable access to .onion domains. Implementing programmatic methods and automated scripts can help you monitor uptime and validate links without compromising your administrative IP footprint.

Programmatic Methods

Utilize tools like Onionprobe to test and monitor the availability and performance of onion services. Onionprobe provides metrics on uptime and can export data to monitoring systems such as Prometheus and Grafana. This tool supports end-to-end encryption, making it suitable for secure environments.

Automated Scripts

For routine checks, consider using Onioff, an open-source Python utility that verifies specific .onion URLs by inspecting response codes through a local Tor instance. This utility allows you to automate health checks, ensuring that you only connect to active services.

Health Check Execution

When executing health checks for .onion endpoints, route requests through local SOCKS proxies. Use command-line tools like torsocks combined with curl to perform these checks effectively. This approach prevents common pitfalls, such as immediate connection timeouts that occur when using standard clearnet uptime checkers.

Protocol-Level Checks

Configure the MetricsPort and MetricsPortPolicy parameters in the Tor daemon to securely scrape Prometheus-compatible node metrics (4). This configuration allows you to monitor service health without exposing your administrative IP address.

Best Practices

1. Regularly verify the operational status of your onion services using Onionprobe or Onioff.

2. Utilize v3 onion addresses for enhanced security, which consist of 56 characters and embed ed25519 public keys (2).

3. Conduct health checks through local SOCKS proxies to avoid connection issues.

By implementing these methods, you can mitigate link rot and ensure the reliability of your onion services, ultimately enhancing your navigation experience on the Tor network.

Deterministic Fingerprinting and Onion Routing Protocol Analysis

Version 3 onion services introduced significant advancements in security and privacy for users and operators. Unlike legacy v2 onion services, which were deprecated in October 2021, v3 addresses utilize a 56-character format embedding a full ed25519 public key (1) (2). This enhancement provides a robust cryptographic foundation for establishing secure communication channels.

Address Generation and Security Features

V3 onion addresses incorporate deterministic fingerprinting, which allows for consistent address generation based on the ed25519 public key. This method improves both usability and security. Each address is directly tied to the corresponding public key, reducing the risks associated with address spoofing and enhancing service integrity.

The cryptographic handshake mechanism for v3 services employs end-to-end encryption. This process is facilitated through daily-rotated blinded public keys, ensuring that user and operator identities remain private (2). The handshake not only secures initial connections but also mitigates traffic analysis risks by obfuscating user behavior.

Circuit Establishment

To connect to a v3 onion service, a 6-hop circuit must be established. This process combines a 3-hop client circuit and a 3-hop service circuit, converging at a rendezvous point (3). The multi-hop architecture enhances anonymity and protects against eavesdropping.

Monitoring and Management Tools

System administrators should utilize tools designed for monitoring onion services effectively. Onionprobe is a Tor-supported tool that tests service availability and performance, providing uptime metrics suitable for integration with systems like Prometheus and Grafana.

Avoid using standard clearnet uptime checkers, as they often fail to connect due to the lack of Tor proxy awareness, leading to connection timeouts. Instead, deploy health check scripts that route requests through local SOCKS proxies. This can be accomplished using command-line tools like torsocks in conjunction with curl.

Best Practices for Administrators

1. Regularly verify v3 onion service operational status using Onionprobe or Onioff.

2. Employ ed25519 public keys for enhanced service security and address generation.

3. Establish circuits through the Tor network to maintain anonymity.

4. Use specialized tools for monitoring to avoid common pitfalls associated with clearnet tools.

By implementing these strategies, system administrators can ensure robust management and security of onion services while navigating the complexities of the Tor network.

Conclusions and Next Steps

You can now navigate the Tor infrastructure with confidence by applying structured verification methods and security protocols. Keep these core takeaways in mind as you manage your network:

1. Always deploy v3 onion addresses featuring 56 characters and ed25519 public keys to maintain strong cryptographic security.

2. Route all automated health checks and verification requests through local SOCKS proxies using tools like torsocks and curl.

3. Utilize dedicated Tor-aware monitoring utilities such as Onionprobe and Onioff instead of standard clearnet checkers.

4. Configure the Tor daemon parameters carefully to scrape Prometheus-compatible node metrics without exposing administrative IP footprints.

To continue expanding your technical knowledge of directory structures, read the guide on Onions Site.