Skip to content

.onion Service Discovery#1114

Open
rxerium wants to merge 5 commits into
owasp-amass:developfrom
rxerium:feature/onion-location-headers
Open

.onion Service Discovery#1114
rxerium wants to merge 5 commits into
owasp-amass:developfrom
rxerium:feature/onion-location-headers

Conversation

@rxerium

@rxerium rxerium commented Apr 11, 2026

Copy link
Copy Markdown
Contributor

Hi @caffix,

This PR includes a new service-discovery plugin that extracts .onion targets from Onion-Location response headers and stores them as OAM URL assets.

Tested and validated against the following domains where .onion URLs are present:

  • proton.me
  • riseup.net
  • securedrop.org

Thanks,
Rishi

rxerium added 5 commits April 11, 2026 16:26
Adds a new plugin (engine/plugins/service_discovery/http_probes/onion_headers.go)
that inspects the Onion-Location HTTP response header on Service assets and stores
any discovered .onion URLs as OAM URL assets. Follows the same pattern as the
Service-Banner-URLs enrichment plugin. Registers the plugin in load.go and covers
the extraction logic with 11 unit tests.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant