PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Robin: AI-Powered Dark Web OSINT & Threat Intelligence Investigation Tool

github.com | tool | #ai-security | #open-source | #threat-intelligence | #osint | #red-team | #llm | #tor | #dark-web | #investigation-tool
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Robin is an open-source, AI-powered dark web OSINT tool that uses Tor and multiple LLMs to refine queries, filter dark web search results, and generate grounded investigation summaries.

Why it matters

Automates tedious dark web reconnaissance and threat intelligence collection by combining Tor indexing with LLM reasoning, substantially reducing manual triage time for security researchers.
Published
Collected

Related coverage

tool · projectdiscovery.io
Community Spotlight: Rishi (@rxerium)
“Open source isn’t about perfection; it’s about putting an idea forward and improving it together as a community.” Rishi (@rxerium) If you’ve spent any time in the Nuclei Templates repository, you’ve almost certainly run something Rishi engineered. With over 500 templates merged, picked up by the likes of the UK’s National Cyber Security Center (NCSC), California Cybersecurity Integration Center, CERT Polska, Spain’s national security agency, and many others, he’s one of the most prolific con
blog · netlas.io
Mapping Dark Web Infrastructure
Explains how investigators trace dark web infrastructure through operational clues and mistakes, using cases like AlphaBay and Hansa to illustrate deanonymization and OSINT mapping techniques.
tool · github.com
Brotli Client Checker: Test Server for Brotli Decoder Vulnerability (CVE-2026-111497)
Provides security teams and developers with a simple, zero-dependency mechanism to test whether backend microservices, crawlers, and HTTP clients are susceptible to the widespread Node2Shell/HTTP2Shell Brotli decoder flaw.
tool · github.com
node2shell-scanner: High-Fidelity Remote Detection Tool for Node.js Brotli OOB Write (CVE-2026-111497)
Provides defenders and security teams with a safe, non-destructive, and high-fidelity method to scan large attack surfaces and confirm Node.js exposure to the critical Brotli decoder flaw.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
Back