GoKawiilNew open-source tool VoidAccess automates dark-web OSINT investigations
A developer released VoidAccess, a self-hostable, open-source tool that lets security researchers turn dark-web search queries into structured threat intelligence. It collects data from Tor indexes, paste sites, code forges and security feeds, extracts entities like IOCs and malware, and builds relationship graphs that can be exported in formats such as STIX, MISP and YARA. It is available via pip install and can run locally or as a Docker Compose stack.
GoKawiil's interpretation of the reporting above, not reported fact.
The project packages several steps of dark-web threat-intelligence work—collection, enrichment, entity extraction and export—into a single open-source workflow, which could lower the cost of entry for smaller security teams that lack commercial OSINT platforms. Its built-in content-safety filters suggest the creator anticipated misuse concerns around automated dark-web scraping tools. Being self-hostable and open source also means its effectiveness and safeguards will depend on how the community audits and extends it over time.
- VoidAccess is an open-source CLI and web tool for dark-web OSINT investigations.
- It automates collection, entity extraction, enrichment and relationship-graph building from dark-web sources.
- Exports support standard formats like STIX 2.1, MISP, YARA and Suricata, and it includes mandatory content-safety filters.
Source: github.com, 2026-10-20
Published there as: “Show HN: VoidAccess – open-source dark web OSINT, from query to a graph”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.