xiry.

Development · Desktop app

VoidAccess

Self-hosted dark web OSINT tool for automated threat intelligence.

From the Xiry library · Updated 3 October 2026

Visit github.com ↗

VoidAccess is an open-source OSINT platform that searches Tor indexes, paste sites, and code repositories to aggregate threat intelligence on targets. It extracts entities, enriches findings across threat feeds and blockchain explorers, and maps infrastructure relationships into exportable reports. It runs via a terminal CLI or as a self-hosted Docker stack with a web interface.

What it's for

  • Investigate dark-web mentions and leaked credentials tied to an organization
  • Track threat actor handles and crypto wallet infrastructure across incidents
  • Export indicators of compromise into STIX 2.1, MISP, or YARA rules for defense systems

Features

  • Parallel collection across 16+ Tor search engines, paste sites, and code repositories
  • Automated entity extraction for crypto wallets, IOCs, credentials, CVEs, and handles
  • Multi-source enrichment via Shodan, VirusTotal, AbuseIPDB, and blockchain explorers
  • Relationship mapping with co-occurrence graphs and actor timeline tracking
  • Modular exports to STIX 2.1, MISP, Sigma, YARA, Snort, Suricata, and CSV/JSON
  • Supports local LLMs via Ollama alongside hosted providers like Groq, OpenAI, and Anthropic
  • Dual interface offering both a fast terminal CLI and a Docker-based Next.js web UI

Pricing

Open source. Free (MIT License)

Details

Type
Desktop app
Category
Development
Topic
Cybersecurity & OSINT
Open source
Yes
Platforms
Command line, Web, Self-hosted, Linux, macOS, Windows
For
Security researchers, threat intelligence analysts, and incident responders.
Alternative to
Recorded Future, DarkOwl, Flare
Tags
osint, cybersecurity, threat intelligence, dark web, tor, cli

Why it was saved

  • @carterperez.dev, 19 July 2026: Searches for compromised logins, crypto wallets, and dark web mentions tied to any target name or company from a single terminal query.

Related

  • Argus

    Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks

  • LeakIX

    Threat intelligence search engine tracking exposed internet services and data leaks

  • OpenOSINT

    AI OSINT agent, MCP server, and framework chaining intelligence tools

  • Robin

    AI-powered dark web OSINT tool for automated querying and summaries

  • BabelStrike

    Transliterate non-Latin names and generate username wordlists for security assessments

  • holehe

    Check if an email address is registered across 120+ online platforms.

Updated