performing-dark-web-monitoring-for-threats - Perform dark web monitoring to identify threats
Systematically scans Tor hidden services, paste sites, and ransomware leak sites to identify leaked credentials and threats targeting organizations.
Tags
Updated: 2026-09-22Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Set up Tor HTTP client
- Verify Tor proxy connection
- Monitor paste sites for credential leaks
- Search dark web for keywords
- Check ransomware sites for mentions
- Generate dark web intelligence report
Inputs
- Organization domains
- Dark web search keywords
- HIBP API key
- Onion paste URLs
- Organization name
Outputs
- Dark web intelligence report
- Credential leak findings
- Ransomware leak site matches
Requirements
- Tor SOCKS5 proxy on port 9050
- Python 3.9+ with stem and requests
- API access to monitoring services
- Isolated virtual machine