Hello and welcome back to the final video of the section two Importance of Dark
Web and How Dangerous It's in this video,
we'll discuss the dark web resources and everything that
you'll need, like a starter kit in your dark web research,
some, uh, good stuff that you can look at.
Do your investigation in any case that you want.
And this is in the threat Intelligence, uh,
helps you a lot and you can conduct your research that you want.
Do the analysis, find something that, that you wanna analyze or,
uh, to track a, uh, hack an account or,
or anything. So basically these resources that I'm gonna give you,
it's really helpful.
That's a good starter kit for anyone that wants start investigating
for serious stuff on dark web. So, let's get started. First I wanna
share dark search on GitHub. It's Pository.
Uh, so basically it's a really, really, really good resource.
It allows you to query cach, onion sites, chat rooms,
chats, black hat forms. So basically it's
tool's, search engine.
So, uh,
the why it's really good having this tool and being able to use
it's cause. You can, uh, check C sites and, you know,
like sometimes down some websites for example, like Silk,
silk Road is, uh, taken down by,
by the FBI a while ago. So using, uh,
this tool you can view like lots of sites that is already
down. So it'll help you to conduct your,
your research in any security research matter.
So I really suggest this tool for the investigation that you'll conduct.
And the second, uh, resource I wanna share, basically,
it's also a repository on GitHub. It's a dark web, awesome tools.
It contains everything that basically you need when you wanna do stuff on, uh,
dark web for, uh, investigation purposes. So,
and the good thing about this repository,
it's categorized by the things that you want.
So like you have tools to get on yours, you have tools to, on yours,
tools to data from the dark web and
search engines. So as you can see,
all these are the search engines. My favorite is amia. Why?
Cause AMIA works on the clear web, unlike the other, uh,
search engines that work on the, it's an link.
So works on the clear. It's,
but also there's a version of it as
but either ways the both of them give you the same output,
the same results. So let's,
as you can see, version fi,
let's say need credit cards.
So it should gimme results about credit cards,
everything related to credit cards if someone is selling, buying anything.
But since I'm not on tour right now,
I can't click on any of these links cause it won't work obviously.
And the good thing about this, uh, AMIA, it gives you like the, uh,
the time of this, uh, when, uh,
the link like this is, is three hours ago. This is two days ago.
So basically it gives you the time of the link when he discovered it or
something like that. So that's really good. Be in mind.
Maybe half of this website won't work. Cause you know,
onion links can be up and down many times.
So not all of these links can work,
but you can try and you can research that what you want.
Let's say you want zero day. So you search and you'll get,
uh, everything related to it. Like here,
you can get zero day marketplace, you can go and uh,
buy some zero days
evil jack exploit seems interesting
today. Agreement exploit database,
lots of good stuff that should look out. Also,
viewing forms is, uh, important.
Like if you view forms about days checking what apt and threat actors talking
about these days,
this gives you about information that is
not known yet. So looking at these kinda stuff, it's also important.
You can like the search and the type like forms and you can check
lots of forms that, uh, like Darknet is very famous.
You can view it and, uh, read some stuff.
Not all the forms, you can view them,
some of them needs account or special access,
but at the end you'll find a turnaround and you can access them.
I'm sure of that. Don't worry. Let's check also another tools here.
We have tools to get onion links. So Huntley,
if you don't know it, uh, it's a tool to get you, uh, onion links.
It's a daily report and, uh, it's free.
It's very useful. Like imagine every day you,
you work as a security analyst let's say.
And each day you get a free report containing and new onion links,
new and old, sorry,
I mean like up and down and description about it. What's about,
is it drug related credit card related,
forms related zero day maybe.
So basically you type your email and uh, you
press send me report. As simple as that.
This is an example of the email that's three hours ago.
So basically it's the newest report.
So download report for Monday Dropbox.
So downloads,
let's services Excel.
Ok, so you,
now this is latest
H
lot, which means it's, uh, it's working.
So you can see like, uh, there's many, many,
many links here categorized.
There's title crypto store,
liquid Caribbean cards,
you name it. So many stuff.
So this will help you even more like, uh, if you need to conduct, uh,
a deep search more what, uh,
at least in the working onion links not down.
So if you go to down, there's good sheets, there's down,
there's new today, there's no nothing new. So down there is nothing.
Uh, so sorry. I mean, uh,
it contains all the down links and
links that working. You can categorize them,
sorry, I mean sorts. So, uh,
you can sort them and you can like, uh, filter,
filter the title, let's say by something specific that you want,
which will make it easier for you to, uh, find specific stuff
for the time being. Let's do this. Control F and type credit,
maybe we'll found something. So buy loan cars,
credit card, buy, that's interesting.
Credit card center, ccpa, CCV two, PayPal,
eBay accounts, dark tools, credit cards. Okay,
so many stuff. So you see, you can search,
you can categorize plenty of stuff you can do here.
Going back to the repository, we have tools to scan onion, links,
onion scan, onion off, onion un.
And you can scan the website and see it if it's alive or not.
It's the same concept as to know if the website is
down or up and that's it. But in Onion map,
you know that typical map,
which it scan scans the IP or websites to check for the open
ports or vulnerabilities. There is the same thing for Onion and you can, uh,
do it through a tool called Onion.
It's docker based. We have also tools to crawl, uh,
data from the dark web, sobo, crawl, vigilant, onion, onion,
er, and dark. And uh, using these tools,
you can like data from the dark web for a specific content.
Let's say you need credit cards, it'll find everything related to credit cards.
It'll find anything related to let's say drug day.
It depends. What do you want, Sobo? I really commend it.
It's a Python tool also, if I'm not wrong.
Yes, it's based on Python. So I really recommended,
so features, onion, onion, links, title,
address with short description about the site, save link to database,
get data from the site, save into file,
custom domain check if the link is builtin,
updater and so on. So these tools, automation tools,
it's really good. Uh,
and I really suggested also this course.
You'll at the end create Python tool automation through
web for the next repository.
Dark ct. So deep dark city, it's uh,
cyber threat intelligence sources from the dark web.
It's important.
Contains many things and updated
basically every week. It depends, like here,
it was updated two days ago, the markets what was, uh,
updated four days ago. So it's really important. This repository.
You have resources in the deep and dark web and you can view stuff
like here. If you go telegram,
you can check all the groups that leaks data,
let's say data leaks, I dunno,
chats, markets, you know, like for me,
telegram is the new dark web since it's secure and it's all about
privacy. Hackers and threat actors talk through that.
And uh, you can find lots of groups that shares the leak database,
even Netflix accounts, uh, combo list, which will contain, uh, uh,
hacked accounts like Netflix, Disney plus, hbo, PlayStation, anything.
Mostly you'll find stuff related to data links and you can find stuff like
also credit card leaks and uh, any kinda leak. For me,
what's important is, uh, leaks and uh,
everything related to data leakage. For example, here we have a group,
it's called Leaks Creator. I already have opened it here.
Ok, so you have,
so this is a chat. You can download this leak data.
It's uh, it's Russian based.
So you can find like very
good amount of data that can be analyzed
and see if you're part of it or if your client's part of TDS
Leakage. If you're doing some, uh,
threat intelligence investigation,
you can find lots of stuff here, as I said.
And I really recommend for you to check. Same thing goes with, uh,
exploits forms, like forms that'll give you websites,
uh, onion links or even uh, clear web, uh,
resources to check for the latest days.
And, uh, all these good stuff that can be useful for, uh,
analyzing and knowing what, what's new, what's old, you know.
So also these resources are really important
exploits today. This is on the,
here you can find latest exploits.
Like here we have as of 20
Apache injection
Java lot stuff.
Here you'll see latest stuff you can buy
Bitcoin and other, uh, important,
uh, discord. Uh, some of some servers that, uh,
related to the, uh, dark web, you can check them. Also
ransomware. And that is important.
I know I'm saying important on everything, but they're really important.
Like here, there's, okay, there's, uh,
a group for that. Anyway, I'll explain it.
So, uh, the ransomware
resources of on for everything related to ransomware
where you can find threat actors and the latest ransomware on the markets.
And here I clicked eight
Telegram check what's new, what's old?
So basically it seems they share, uh, files related
to ransomware. Some weird stuff.
Ok. So, uh, you can view
everything related here to the ransomware here. Also, there is a dashboard,
ransomware monitor, top five group ransomware.
We have club lock. Yeah, I agree.
And three Alpha. That's good.
Website for monitor.
Latest news on the threat intelligence and the latest apt stuff.
IOCs, you can check the tweets, uh, on Twitter.
Uh, for people who share these kinda stuff, uh, it's really important.
All of them. I suggest them. It's, it's good. You can, uh,
follow them and uh, check the latest
fishing here. Also everything related to the uh,
stuff. Also to analyze and, uh, have, uh,
knowledge about it.
And you can test for also fishing org.
I really commend. And that's it for, uh,
this video. I hope, uh, it was, uh, useful. Uh,
these resources, again, it's like a starter kit. It's not everything,
it doesn't mean this is only the resources that you'll use.
It's endless at the end. You do your own research, have your own resources,
also build your network and dark web so that you can
find more and more extra stuff.
Cause sometimes you need a special access to stuff.
Like in some scenarios happen with me.
I needed a special access to get leak databases.
So not everything is always available.
Next.