圖標

Ghost — Onion Search

Tor onion search aggregator. Privacy-first, RAM-only, no tracking.
新版本 4.0.1
Fixes from external protocol review: queries with spaces or non-ASCII characters no longer get double-encoded before reaching engines; truncated engine responses now surface as errors instead of partial results; 307/308 redirects preserve POST same-origin and are rejected cross-host when carrying a request body.
Ghost is a privacy-first Tor onion search aggregator for Android. It queries 13 public onion search engines in parallel, deduplicates and ranks the results, and opens links externally in Tor Browser.

KEY FEATURES

• 13 onion search engines queried in parallel
• RAM-only session — no queries, results, or history written to disk
• Three purge triggers: panic wipe, screen lock, app exit
• VPN gate — non-dismissible, blocks queries unless Orbot VPN is active
• Tor SOCKS5 transport with remote DNS via Tor
• FLAG_SECURE — blocks screenshots and recents thumbnails
• No backend, no telemetry, no accounts, no ads
• Stop button to cancel running searches
• Consent gate with 18+ verification, shown every session
• External link handoff to Tor Browser

PRIVACY

No data collected, stored, or transmitted to any server. Queries and results exist only in RAM during the active session. Only three non-sensitive preferences persist across sessions: engine selection, snippet filter, VPN requirement.

The app never renders remote HTML. Links open externally in Tor Browser via intent. Screenshots and recent-app previews are blocked.

REQUIREMENTS

• Android 7.0+ (API 24)
• Orbot in VPN mode (for Tor transport)
• Tor Browser for Android (for opening result links)

HOW IT WORKS

1. Enter a search query
2. Ghost queries 13 onion search engines in parallel via Tor
3. Results are parsed, deduplicated, and ranked
4. Tap any result to open it in Tor Browser
5. When you lock the screen, exit the app, or hit panic — all session data is wiped from RAM

WHO IS THIS FOR

Ghost is built for researchers, journalists, and people who need access to information in restrictive environments. It is a tool for legitimate open-source intelligence (OSINT), investigative journalism, academic study, and censorship circumvention. The app is designed for adults who take personal responsibility for their research activities.

The developer maintains a portfolio of OSINT and security research tools. Ghost is the mobile extension of this research toolchain.

USE CASES

• Journalism and investigative research in restrictive environments
• Security research and OSINT analysis
• Academic study of onion services and censorship circumvention
• Access to information in regions with restricted internet
• Privacy education and digital rights research

OPEN SOURCE

MIT licensed. Source code available for independent security audit:
https://github.com/sookoothaii/digital-spyglass-android

The developer's other OSINT research projects are publicly available at:
https://github.com/sookoothaii

DISCLAIMER

This is a research tool. Search results come from public onion search engines and are not filtered. The app does not host, produce, or endorse any content. Users are responsible for complying with their local laws.

The developer is not affiliated with The Tor Project and does not operate any Tor infrastructure.

版本

雖然在下方可選擇下載 APK 檔案,但要留意這樣的安裝方式將不會收到更新通知,是一種較不安全的下載方法。建議您先安裝 F-Droid 用戶端使用。

下載 F-Droid
  • 版本 4.0.1 (11) 建議 於 2026 年 10 月 25 日新增

    此版本需要 Android 7.0 或更高的版本。

    此套件包由原開發者建置和簽署,並保證與此原始碼 Tarball 保持一致。

    權限
    • 查看網路連線
      允許應用程式查看網路連線相關資訊,像是有哪些網路,以及有沒有連上。
    • 隱藏其他應用程式的疊加內容
      該應用程式可以要求系統隱藏其他應用程式顯示在上方的疊加內容。
    • 擁有完整的網路存取權
      允許應用程式建立網路通訊端及使用自訂網路通訊協定。瀏覽器和其他應用程式會提供將資料傳輸到網際網路的方法,因此不需要這項權限也能將資料傳輸到網際網路。
    • 控制震動
      允許應用程式控制震動。
    • org.darknetcrawler.mobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    下載 APK 1.8 MiB PGP 簽章 | 建置紀錄

  • 新版本 3.0.0
    v3.0.0

    • Trust-weighted Reciprocal Rank Fusion (RRF k=10) + quality filter modifier
    • Per-engine query contracts (length, term count, boolean/quote normalization)
    • Fast 5 mode (5 Core + Reinforcement engines, ~60% lower search latency)
    • RAM-only cross-domain entity correlation and CSV/STIX 2.1 export
    • Fix chunked keep-alive socket reads (TorDex) and UTF-8 response decoding
    • Ahmia MD5 hash blacklist support and updated Torch endpoint
  • 版本 3.0.0 (7) - 於 2026 年 10 月 22 日新增

    此版本需要 Android 7.0 或更高的版本。

    此套件包由原開發者建置和簽署,並保證與此原始碼 Tarball 保持一致。

    權限
    • 查看網路連線
      允許應用程式查看網路連線相關資訊,像是有哪些網路,以及有沒有連上。
    • 隱藏其他應用程式的疊加內容
      該應用程式可以要求系統隱藏其他應用程式顯示在上方的疊加內容。
    • 擁有完整的網路存取權
      允許應用程式建立網路通訊端及使用自訂網路通訊協定。瀏覽器和其他應用程式會提供將資料傳輸到網際網路的方法,因此不需要這項權限也能將資料傳輸到網際網路。
    • 使用生物識別硬體
      允許應用程式使用生物特徵硬體進行驗證
    • 使用指紋硬體
      允許應用程式使用指紋硬體進行驗證
    • 控制震動
      允許應用程式控制震動。
    • org.darknetcrawler.mobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    下載 APK 1.8 MiB PGP 簽章 | 建置紀錄