# VoidAccess

> Self-hosted dark web OSINT tool for automated threat intelligence.

VoidAccess is an open-source OSINT platform that searches Tor indexes, paste sites, and code repositories to aggregate threat intelligence on targets. It extracts entities, enriches findings across threat feeds and blockchain explorers, and maps infrastructure relationships into exportable reports. It runs via a terminal CLI or as a self-hosted Docker stack with a web interface.

Website: https://github.com/KatrielMoses/voidaccess

## What it is for

- Investigate dark-web mentions and leaked credentials tied to an organization
- Track threat actor handles and crypto wallet infrastructure across incidents
- Export indicators of compromise into STIX 2.1, MISP, or YARA rules for defense systems

## Features

- Parallel collection across 16+ Tor search engines, paste sites, and code repositories
- Automated entity extraction for crypto wallets, IOCs, credentials, CVEs, and handles
- Multi-source enrichment via Shodan, VirusTotal, AbuseIPDB, and blockchain explorers
- Relationship mapping with co-occurrence graphs and actor timeline tracking
- Modular exports to STIX 2.1, MISP, Sigma, YARA, Snort, Suricata, and CSV/JSON
- Supports local LLMs via Ollama alongside hosted providers like Groq, OpenAI, and Anthropic
- Dual interface offering both a fast terminal CLI and a Docker-based Next.js web UI

## Pricing

Open source. Free (MIT License)

## Details

- Type: Desktop app
- Category: [Development](https://xiry.app/topics/development.md)
- Open source: yes
- Platforms: Command line, Web, Self-hosted, Linux, macOS, Windows
- For: Security researchers, threat intelligence analysts, and incident responders.
- Alternative to: Recorded Future, DarkOwl, Flare
- Tags: osint, cybersecurity, threat intelligence, dark web, tor, cli

## Why it was saved

- [@carterperez.dev, 19 July 2026](https://www.instagram.com/reel/Da-uDDRR6RJ/): Searches for compromised logins, crypto wallets, and dark web mentions tied to any target name or company from a single terminal query.

## Related

- [Argus](https://xiry.app/resources/argus): Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks (GitHub repo, Open source)
- [LeakIX](https://xiry.app/resources/leakix): Threat intelligence search engine tracking exposed internet services and data leaks (Website, Freemium)
- [OpenOSINT](https://xiry.app/resources/openosint): AI OSINT agent, MCP server, and framework chaining intelligence tools (GitHub repo, Open source)
- [Robin](https://xiry.app/resources/robin): AI-powered dark web OSINT tool for automated querying and summaries (GitHub repo, Open source)
- [BabelStrike](https://xiry.app/resources/babelstrike): Transliterate non-Latin names and generate username wordlists for security assessments (GitHub repo, Open source)
- [holehe](https://xiry.app/resources/holehe): Check if an email address is registered across 120+ online platforms. (GitHub repo, Open source)

Updated 3 October 2026. Page: https://xiry.app/resources/voidaccess

Make your own library: Xiry takes your saved reels, tweets, Reddit bookmarks and Watch Later videos, makes them searchable and pulls the useful stuff out, like this library. It's invite-only for now; join the waitlist at https://xiry.app/#waitlist.