Ghost Search

org.darknetcrawler.mobile
by Zapstore _@zapstore.dev

Tor onion search aggregator. Privacy-first, RAM-only, no tracking.

Republished from GitHub / F-Droid by the Zapstore main account.

Ghost is a privacy-first Tor onion search aggregator for Android. It queries 13 public onion search engines in parallel, deduplicates and ranks the results, and opens links externally in Tor Browser. KEY FEATURES • 13 onion search engines queried in parallel • RAM-only session — no queries, results, or history written to disk • Three purge triggers: panic wipe, screen lock, app exit • VPN gate — non-dismissible, blocks queries unless Orbot VPN is active • Tor SOCKS5 transport with remote DNS via Tor • FLAG_SECURE — blocks screenshots and recents thumbnails • No backend, no telemetry, no accounts, no ads • Stop button to cancel running searches • Consent gate with 18+ verification, shown every session • External link handoff to Tor Browser PRIVACY No data collected, stored, or transmitted to any server. Queries and results exist only in RAM during the active session. Only three non-sensitive preferences persist across sessions: engine selection, snippet filter, VPN requirement. The app never renders remote HTML. Links open externally in Tor Browser via intent. Screenshots and recent-app previews are blocked. REQUIREMENTS • Android 7.0+ (API 24) • Orbot in VPN mode (for Tor transport) • Tor Browser for Android (for opening result links) HOW IT WORKS 1. Enter a search query 2. Ghost queries 13 onion search engines in parallel via Tor 3. Results are parsed, deduplicated, and ranked 4. Tap any result to open it in Tor Browser 5. When you lock the screen, exit the app, or hit panic — all session data is wiped from RAM WHO IS THIS FOR Ghost is built for researchers, journalists, and people who need access to information in restrictive environments. It is a tool for legitimate open-source intelligence (OSINT), investigative journalism, academic study, and censorship circumvention. The app is designed for adults who take personal responsibility for their research activities. The developer maintains a portfolio of OSINT and security research tools. Ghost is the mobile extension of this research toolchain. USE CASES • Journalism and investigative research in restrictive environments • Security research and OSINT analysis • Academic study of onion services and censorship circumvention • Access to information in regions with restricted internet • Privacy education and digital rights research OPEN SOURCE MIT licensed. Source code available for independent security audit: https://github.com/sookoothaii/digital-spyglass-android The developer's other OSINT research projects are publicly available at: https://github.com/sookoothaii DISCLAIMER This is a research tool. Search results come from public onion search engines and are not filtered. The app does not host, produce, or endorse any content. Users are responsible for complying with their local laws. The developer is not affiliated with The Tor Project and does not operate any Tor infrastructure.

First release: Oct 20, 2026, 2 total releases.

Most recent release: Oct 27, 2026.

Repo

Appears in 0 app stacks.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

  • Oct 27, 2026 4.1.0
    License: GPL-3.0-or-later from this release onward (<=v4.0.1 remains MIT). - Signed engine registry: verified at runtime against the APK signing key; sequence numbers with rollback protection — tampered or replayed registries are rejected (genesis signature seq 1). - Request fingerprint aligned with current Tor Browser on Android (UA, Accept-Encoding gzip/deflate, keep-alive) - Task-hijacking hardening (empty taskAffinity) - Per-engine Tor circuit isolation, pinned by tests - Bundled Ahmia blacklist snapshot (offline-capable abuse filter, live refresh) - Investigator workbench: entity graph, mirror-aware routing, hash-chained case files, PGP identities, tracking-strip detection, wallet enrichment, personas — RAM-only, opt-in - Audit hardening: full purge coverage of session state, recursive forbidden-key rejection in registry imports, case-sensitive entity dedup (extraction/graph/wallet), breaker skips failed-engine mirrors, panic wipe clears webview, clearnet requires explicit opt-in
    More…
    **ghost-v4.1.0-release.apk** — 3,162,199 bytes, SHA-256 `8d8f593bbdb3d626313969a3ec72777fcba77f83d12b9951bbf6b4d0ea66dd01`, signer `0295bf53d9abe8621e41510cdc1bd8dcaf992745621a6bcff33eeb6f3f870106` (v2+v3). Verify with `apksigner verify --print-certs`.
  • Oct 20, 2026 4.0.1
    Three findings from external adversarial protocol review (Hugging Face thread 190805): - Single-owner URL encoding: pre-encoded queries no longer re-escaped (q=a%20b arrives verbatim) - Response-completion enforcement: Content-Length premature EOF, missing chunk terminator, and body-cap before end-of-stream now error instead of returning partial results as 200 - Redirect method policy: 301/302/303 -> GET; 307/308 preserve POST same-origin; cross-host redirect carrying a request body is rejected 15/15 JUnit, 245/245 Vitest. Asset: ghost-v4.0.1-release.apk