otlite · Dark web

Install TorBot on Linux or macOS in one command

TorBot crawls an onion site through Tor, collects the links and emails it finds, and can build a tree of the site. It needs a local Tor service to route through.

TorBot in three lines

pipx install otlite
otlite install torbot
otlite run torbot -- url:https://example.com

Runs DedSecInside/TorBot (Other, ★ 4.9k, otlite 1.2.1, catalog updated Oct 23, 2026). otlite installs and runs it at a tested version; it does not change or verify the tool itself.

What TorBot is for

Mapping an onion site's structure.
Harvesting contact addresses published on it.

Typed inputs for TorBot

otlite translates these prefixes into TorBot's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

url:: URL · otlite run torbot -- url:https://example.com

Run every installed tool that takes the same input at once: otlite run --all url:https://example.com

Where the results go

Every run lands under ./results/torbot/<target>/ as a timestamped output file, a .meta.json sidecar (the exact command, start and end time, exit code, and the SHA-256 of the output), and a .envelope.json with the entities found, in the same shape for every tool. List runs with otlite results, group them with --case, compare the last two with otlite diff torbot <target>, and pull indicators out with otlite extract torbot.

Before you run it

Start Tor first (sudo systemctl start tor on Debian and Ubuntu).
Crawling is slow over Tor; limit depth.

Update, remove, inspect

otlite info torbot      # inputs, keys, an example command
otlite example torbot   # sample output, where there is one
otlite update torbot    # move to the next tested version
otlite remove torbot    # delete its virtualenv

Full reference: the otlite docs, and the tool's own README on GitHub.

Pairs with

OnionSearch

OnionSearch sends a query to a set of dark web search engines over Tor and collects the onion URLs they return into one CSV.

FinalRecon

FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan.

SpiderFoot

SpiderFoot runs two hundred-odd modules against a domain, IP, email, or username and links what they return into one graph.

FAQ

TorBot with otlite, answered

How do I install TorBot on Kali, Ubuntu, or macOS?

Install otlite once with pipx install otlite (or the one-line installer on the otlite page), run otlite init, then otlite install torbot. The tool lands in its own virtualenv under ~/.otlite/, pinned to a version that was tested, so nothing touches your system Python. otlite doctor prints the command that fixes a missing git or venv module.

Which inputs does TorBot take through otlite?

url: (url). otlite maps each prefix to TorBot's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otlite save TorBot results?

Under ./results/torbot/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar (the exact command, timing, exit code, and SHA-256) and a .envelope.json with the entities found. Add --case <name> to group runs, otlite results to list them, and otlite diff torbot <target> to compare the last two.

Does TorBot need an API key or a login?

No key is required for the basic run. Optional keys, where the project supports them, go in with otlite keys set NAME and are passed only to tools that declare them.

Can I run TorBot together with other tools?

Yes. otlite run --all url:https://example.com runs every installed tool that takes url input, in parallel, including TorBot. Save the combination as a playbook to repeat it.