> For the complete documentation index, see [llms.txt](https://intrusionz3r0.gitbook.io/intrusionz3r0/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://intrusionz3r0.gitbook.io/intrusionz3r0/dark-web.md).

# Dark Web

## Foundations

<figure><img src="https://3625372132-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMZZ5b7ge25IjFldP6WSt%2Fuploads%2FJk7E7847CVSL6ReBQnLx%2Fimage.png?alt=media&amp;token=a733b594-51b2-472a-9b81-fc7181fe5c6b" alt=""><figcaption></figcaption></figure>

**Surface Web**

* Google, Youtube, Facebook, Reddit, etc.
* Anything accessible through a link.
* Covers a total of `4%` of internet.
  * Access tools:
    * Common public browser (Chrome, Safari, Firefox, Brave)&#x20;

**Deep Web**

* Private Emails, Dropbox, Public Records, ETC.
* Anything you can't directly link to, or has security
* Covers a total of `90%` of internet.
* Access tools:
  * Common public browser (Chrome, Safari, Firefox, Brave)&#x20;

**Dark Web**

* Markets, hidden sites, Tor sites
* Purposefully hidden , special access to material either legal or illegal.
* Covers a total of `6%` of internet.
* Access tools:
  * Tor
  * Tails (Operating System)

{% hint style="info" %}
Using Tor is legal in most countries, but its ultimate legality depends on the purpose, laws governing the country, location, and the actions for which it is used.
{% endhint %}

## Important Concepts

### TOR&#x20;

<figure><img src="https://3625372132-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMZZ5b7ge25IjFldP6WSt%2Fuploads%2Fe0OBW017acedVAD1oXwC%2Fimage.png?alt=media&amp;token=d0e3d921-e824-4f70-b4be-7a90a91cb16b" alt=""><figcaption></figcaption></figure>

Tor (**The Onion Router**) is open-source software that allows you to browse the internet **anonymously** by routing your web traffic through a global network of volunteer-run servers called **nodes** or **relays**.

<figure><img src="https://3625372132-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMZZ5b7ge25IjFldP6WSt%2Fuploads%2FeBI8intnMQ5tOJzwYks6%2Fimage.png?alt=media&amp;token=a4baaf8e-2c36-423f-b25d-0410f777d8fd" alt=""><figcaption></figcaption></figure>

**How TOR works**

{% hint style="info" %}
Imagine you need to send a card (your data) to someone (a website), but you don’t want anyone to know you are the sender (your IP address). Instead of sending the card directly, you **wrap it in several layers of envelopes**, one for each person (node or relay) it will pass through.

Each person (node) only knows:

* **Who they received the card from** (the previous node’s IP).
* **Who they are giving it to** (the next node).

When a node receives the card, it **removes only the outer envelope** to see where to send it next.

* The **first node (Guard Relay)** doesn’t know the final destination, only the next node.
* The **last node (Exit Relay)** doesn’t know the original sender, only where to deliver the card.
  {% endhint %}

### Pretty Good Privacy (PGP)

PGP, which stands for Pretty Good Privacy, is a security program that uses encryption and digital signatures to protect data communication.

#### **How it works**

1. Each person has **two keys**:
   * **Public key:** you can give this to anyone who wants to send you a secure message.
   * **Private key:** you keep this secret; it’s used to **unlock the messages** sent to you.
2. When someone sends you a message:
   * They lock it using your public key.
   * Only your private key can unlock it and read it.

### BITCOIN

Bitcoin is a **digital currency** that exists only online. You can send and receive it over the internet **without using a bank**.

{% hint style="info" %}
Bitcoin relies on a technology called the **blockchain**, which is like a **giant public ledger** where all transactions are recorded. Everyone can see the transactions, but they only see the addresses, not the real identities of the people sending or receiving Bitcoin.

Each user has:

* **Address:** like a bank account number for receiving Bitcoin.
* **Private key:** like a secret password used to spend your Bitcoin.
  {% endhint %}

### VPN and TOR

| Setup         | Purpose                             | Advantages                                                 | Disadvantages                          |
| ------------- | ----------------------------------- | ---------------------------------------------------------- | -------------------------------------- |
| **VPN → Tor** | Hide Tor usage from ISP             | ISP cannot detect Tor; VPN hides your IP from Tor nodes    | VPN sees your traffic; slightly slower |
| **Tor → VPN** | Hide Tor exit traffic from websites | Websites see VPN IP, protects against malicious exit nodes | Very slow; complex setup               |

## Security Measures

### Security Levels

Increasing the Security Level in the Tor Browser Security settings will disable or partially disable certain browser features to protect against possible attacks.

| Security Level | Description                                          | Key Changes / Restrictions                                                                                                                   |
| -------------- | ---------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| **Standard**   | Default level, all features enabled                  | All Tor Browser and website features work normally                                                                                           |
| **Safer**      | Disables some risky website features                 | <p>- JavaScript disabled on non-HTTPS sites<br>- Some fonts and math symbols disabled<br>- Audio & Video (HTML5) click-to-play</p>           |
| **Safest**     | Only allows features required for static/basic sites | <p>- JavaScript disabled on all sites<br>- Some fonts, icons, math symbols, and images disabled<br>- Audio & Video (HTML5) click-to-play</p> |

### Bridges

| Pluggable Transport | Purpose                                                                                                  | Advantages                                                                      | Disadvantages                                                 |
| ------------------- | -------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- | ------------------------------------------------------------- |
| **obfs4**           | Makes Tor traffic look like random data                                                                  | Fastest for general use; works in moderately censored networks                  | Might not work in highly censored countries; requires bridges |
| **Snowflake**       | Routes connection through temporary volunteer proxies, making traffic look like normal web/video traffic | Very effective in heavily censored networks; dynamically uses available proxies | Slower than obfs4; depends on volunteer proxies availability  |
| **meek-azure**      | Makes Tor traffic look like it’s connecting to a Microsoft website (Azure)                               | Works in very strict and heavily censored regions                               | Very slow; higher latency due to proxy routing                |

## Checklist

* [ ] Familiarize yourself with how TOR works.
* [ ] Configure your security setting using the `Safer` or `Safest` .
* [ ] Regularly check for updates and keep your Tor Browser up-to-date.
* [ ] Use tor for all online activities.
* [ ] Ensure that websites you visit are using HTTPS to encrypt your data.
* [ ] Avoid torrenting over Tor.
* [ ] Keep you OS and software up-to-date with security patches.
* [ ] never share personal information while user Tor.

## Installation TOR&#x20;

```sh
sudo apt update && sudo apt upgrade -y
sudo apt install tor torbrowser-launcher -y
sudo systemctl start tor
sudo systemctl enable tor   # Optional: start Tor on boot
sudo systemctl status tor
torbrowser-launcher
```

IOS: <https://apps.apple.com/us/app/onion-browser/id519296448>

Android: <https://play.google.com/store/apps/details?id=org.torproject.torbrowser>

Windows: <https://www.torproject.org/download/>

***

## Email Provides

* [ProtonMail](https://protonmail.com)
* [Tutanota](https://tutanota.com)
* [Mailfence](https://mailfence.com)

## Anonymous Phone Number

* [Crypton.sh](https://crypton.sh/)
* [SMSPVA.com](https://smspva.com/)
* [SMS-Activate.org](https://sms-activate.org/)

**Permanent solution**

* Buy prepaid SIM card in cash without ID.
* Consider VoIP services accepting cryptocurrency.

## Fake Identity

* [**Fake Name Generator**](https://www.fakenamegenerator.com/)
* [**Fake Person Generator**](https://www.fakepersongenerator.com/)
* [**This Person Does Not Exist**](https://thispersondoesnotexist.com)

{% embed url="<https://www.fakenamegenerator.com/>" %}

## **Secure Encrypted Messaging**

* [**Briar**](https://briarproject.org) Decentralized, no registration, offline capable.
* [**Signal**](https://signal.org) Strong end-to-end encryption, register anonymously.
* [**Matrix (Element)**](https://element.io) Decentralized messaging accessible via Tor.

## **Anonymous Package Delivery**

* [**Amazon Lockers**](https://www.amazon.com/ulp) Public lockers; pseudonyms accepted.
* [**Reship.com**](https://www.reship.com) Parcel forwarding services with minimal registration.
* **USPS General Delivery** Pick up packages anonymously at post offices.

## **Anonymous Payments**

* [**Privacy.com**](https://privacy.com) Anonymous virtual credit cards (U.S. focused).
* [**SideShift.ai**](https://sideshift.ai) Cryptocurrency exchange without registration or KYC.
* [**ChangeNOW.io**](https://changenow.io) No KYC crypto exchanges, supports Monero (XMR).