Skip to main content

04 Dark Web

CAUTION

This material is provided for educational purposes, authorized security testing, and personal privacy research only. Do not use any technique or tool described here against systems, networks, or individuals without explicit written authorization. You are solely responsible for complying with all applicable laws in your jurisdiction.

The dark web is the part of the internet reachable only through anonymity networks like Tor. It hosts both legitimate services (SecureDrop, OnionShare, privacy-focused forums) and illegal marketplaces. This subcategory focuses on the technical and operational aspects of dark web services that a security professional, journalist, or privacy-conscious operator needs to understand.

This subcategory is part of the ANONYMITY-PRIVACY-OPSEC category. All files follow the Hands-on format (13 sections, ending with Legal and Ethical Notes instead of OSCP Notes).

Scope​

This subcategory covers:

  • Hidden Services - how Tor onion services work, how to run one, and how to harden it.
  • OnionShare - anonymous file sharing, hosting, and chat over Tor.
  • SecureDrop - the journalist-to-source whistleblowing platform.
  • Pastebins and Dead Drops - anonymous text publishing and covert data retrieval.

This subcategory does NOT cover:

  • Illegal marketplaces or the purchase of illegal goods.
  • How to buy or sell anything on the dark web.
  • Criminal use of hidden services.
  • Cryptocurrency tumblers used to hide proceeds of crime (see 06 for legitimate privacy tooling).

Any use of the techniques in this subcategory for illegal activity is prohibited by the disclaimer above and is illegal in most jurisdictions.

Threat Model Summary​

Tool / TopicProtects againstDoes NOT protect againstMetadata
Hidden ServicesServer IP exposure, client IP exposureEndpoint compromise, targeted deanonymizationOnion address is public; traffic correlation is possible
OnionShareThird-party file hosting, IP leaksEndpoint compromise, traffic analysisTor-protected; no third-party server
SecureDropSource identification, provider reading submissionsEndpoint compromise, traffic analysis, physical access to the SecureDrop serverDesigned for source anonymity; strong
Pastebins / Dead DropsIdentity correlation, easy takedownEndpoint compromise, traffic analysisVaries by service; read carefully

Files​

#FileFocus
01Hidden ServicesRun and harden a Tor onion service
02OnionShareAnonymous file sharing, hosting, chat
03SecureDropWhistleblowing platform for journalists
04Pastebins and Dead DropsAnonymous text and covert data retrieval
  • 01 Anonymous Networks - Tor, I2P, Lokinet, VPN chains (transport layer).
  • 02 Secure Communications - Session, SimpleX, XMPP/OMEMO, anonymous email, PGP.
  • 03 Operating Systems and Hygiene - Tails, Qubes, data destruction, metadata.

Hidden services, OnionShare, and SecureDrop are legal to use in most jurisdictions. However:

  • Some countries restrict or ban Tor and onion services. Check your local law before hosting or accessing hidden services.
  • Hosting illegal content is a crime everywhere. Do NOT use these tools to distribute illegal material, including CSAM, malware, or stolen data.
  • Using these tools to plan or commit a crime is illegal everywhere.
  • Corporate policy may forbid them. On a work device, using or hosting hidden services may violate acceptable-use policy.
  • You are responsible for what you host. If you run a hidden service, you are the publisher.
  • Authorized use only. In a professional context, use these tools only within the scope of an authorized engagement or for your own personal privacy.

References​