id: onion-website-supported

info:
  name: Onion Website Supported via Onion-Location Header
  author: rxerium
  severity: info
  description: |
    Identified websites that supported Tor network access through the Onion-Location HTTP response header, which pointed to a corresponding .onion service for enhanced privacy and anonymity.
  metadata:
    verified: true
    max-request: 1
  tags: misc,osint,tor,onion,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: regex
        part: header
        regex:
          - '(?i)onion-location:\s*https?://[a-z0-9]+\.onion'

    extractors:
      - type: regex
        part: header
        group: 1
        regex:
          - '(?i)onion-location:\s*(https?://[a-z0-9]+\.onion)'
# digest: 4a0a004730450220124044ad9c0fdcdb01aeb698fd89f8c38bdd44962b9c653b18e43e48ee5fb88c0221009aa386c36ebab543e48f5147140bc4507009941a2b6f1038e5e1ce851e8b16f1:922c64590222798bb761d5b6d8e72950