OSINTverse
Sign in

otinstaller · Dark web

Install TorBot on Linux in one command

TorBot crawls an onion site through Tor, collects the links and emails it finds, and can build a tree of the site. It needs a local Tor service to route through.

TorBot in three lines

pipx install otinstaller
ot install torbot
ot run torbot -- url:https://example.com

Runs DedSecInside/TorBot (Other, ★ 4.9k, otinstaller v0.0.4, registry updated Oct 13, 2026). otinstaller installs and runs it; it does not change or verify it.

What TorBot is for

  • Mapping an onion site's structure.
  • Harvesting contact addresses published on it.

Typed inputs for TorBot

otinstaller translates these prefixes into TorBot's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

url:
url · ot run torbot -- url:https://example.com
d:
domain · ot run torbot -- d:example.com

Run every installed tool that takes the same input at once: ot run --all url:https://example.com

Where the results go

Every run lands under ./results/torbot/<target>/ as a timestamped output file plus a .meta.json sidecar: the exact command, start and end time, exit code, and the SHA-256 of the output. Group runs with --case, compare the last two with ot diff torbot <target>, and pull indicators out with ot extract.

Before you run it

  • Start Tor first (sudo systemctl start tor on Debian and Ubuntu).
  • Crawling is slow over Tor; limit depth.

Update, remove, inspect

ot info torbot      # inputs, flags, keys
ot example torbot   # sample output
ot update torbot    # move to the next tested version
ot remove torbot    # delete its virtualenv

Full reference for this tool: docs for torbot.

Pairs with

OnionSearch
OnionSearch sends a query to a set of dark web search engines over Tor and collects the onion URLs they return into one CSV.
FinalRecon
FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan.
SpiderFoot
SpiderFoot runs two hundred-odd modules against a domain, IP, email, or username and links what they return into one graph.

FAQ

TorBot with otinstaller, answered

How do I install TorBot on Kali or Ubuntu?

Install otinstaller once with pipx install otinstaller, run ot init, then ot install torbot. The tool lands in its own virtualenv under ~/.otinstaller/, pinned to a version that was tested on Ubuntu, so nothing touches your system Python. ot doctor flags a missing git or venv module.

Which inputs does TorBot take through otinstaller?

url: (url), d: (domain). otinstaller maps each prefix to TorBot's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otinstaller save TorBot results?

Under ./results/torbot/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar with the exact command, timing, exit code, and SHA-256. Add --case <name> to group runs, and ot diff torbot <target> to compare the last two.

Does TorBot need an API key or a login?

No key is required for the basic run. Optional keys, where the project supports them, go in ~/.otinstaller/.env and are passed only to tools that declare them.

Can I run TorBot together with other tools?

Yes. ot run --all url:https://example.com runs every installed tool that accepts url input, in parallel, including TorBot. Save the combination as a playbook to repeat it.