TOR ROUTED • PER-REQUEST ENTROPY • SINGLE-FILE

## Ultimate Stealth Recon,
Built for Deliberate Operators.

INFILTRATOR is a hardened Tkinter control panel for recursive acquisition and passive target analysis. Each HTTP request is a fresh identity: new user-agent, new connection, Tor SOCKS routing. Transparent. Auditable. No silent behavior.

☠
SATAN IS A COMPUTER. Not a mascot. An aesthetic. A caution sign over a very real machine.
RUN How to Operate SPEC Capabilities SYS Requirements
CONSOLE FEED LIVE

    [+] INFILTRATOR 2.2 ready
    [+] db     : ./DaRK.db
    [+] scrapes: ./SCRAPES/

    [+] RUN START 2026-02-11 21:48:39  run_id=20260211_214839
    [+] targets=1 tor=SOCKS5h out=SCRAPES/<domain>/

    [*] Fetching: http://example.com/
    [+] user-agent: Mozilla/5.0 (...)
    [+] connection: close
    [+] proxy     : socks5h://127.0.0.1:9050

    [+] Saved → SCRAPES/example.com/index.html
    [*] Crawling internal links…
    [+] Saved → SCRAPES/example.com/assets/app.css
    [+] Saved → SCRAPES/example.com/images/logo.png

### Capabilities

Built for controlled, explicit execution. No hidden services. No background polling. If it moves, it moves because you told it to.

- 01
  Per-request entropy

  Fresh TCP connection and randomized User-Agent for every request. No keep-alive. No pooling. No sticky identity.

- 02
  Tor SOCKS5h routing

  Routes traffic through 127.0.0.1:9050 using SOCKS5h (DNS through Tor).

- 03
  Mirror-style output

  Preserves remote paths locally under SCRAPES/<domain>/… for clean offline inspection.

### Target Analyzer

Passive, read-only interrogation of selected targets. Extracts title, meta description, and OpenGraph tags. Prints everything to stdout, mirrored in the UI.

    ANALYZE SELECTED (READ ONLY)
    - tor-routed fetch
    - header + html retrieval
    - stdlib HTML parsing
    - no DB mutation
    - no silent writes

### Operations

GUI-first control panel. Add targets to DaRK.db, select, run. STOP is immediate and kills process trees cleanly.

    BASIC FLOW
    1) Add URL → stored in DaRK.db
    2) Select one or more targets
    3) Scrape Selected / Scrape ALL
    4) (Optional) Analyze Selected
    5) STOP aborts the run immediately

### Entropy Contract

Identity changes happen at request boundaries, not “sessions.” This makes tracking scripts see what they fear: no stable fingerprint to hold onto.

    REQUEST BEHAVIOR
    - new UA every request
    - new socket every request
    - Connection: close
    - SOCKS5h via Tor 9050
    - external NEWNYM rotation respected

### Requirements

Minimal moving parts. Your system provides Tor. INFILTRATOR provides controlled execution.

    SYSTEM REQUIREMENTS
    - Python 3
    - Tor running locally with SOCKS on 127.0.0.1:9050

    PACKAGING
    - Single-file source
    - PyInstaller --onefile compatible

    OUTPUT
    - DaRK.db (external, persistent)
    - SCRAPES/<domain>/ (mirrored acquisition)

BIN Download INFILTRATOR II (Linux)