ROTTWEILER

Dark Web Intelligence Engine

Multi-engine Tor search with AI-powered intelligence analysis and structured report generation.

---

Interface

Hunt Dashboard

AI Analysis Page

---

Features

Intelligence Collection

• 13 integrated Tor search engines
• Concurrent scraping via Tor SOCKS5 proxy
• BM25 relevance ranking (Okapi BM25)
• Service uptime monitoring
• Timeline-based intelligence tracking

AI Analysis

• Multi-provider LLM support (Claude, GPT-4o, Gemini, Groq Llama 3.3, OpenRouter)
• Automated intelligence brief generation
• Export results as structured .md reports

Deployment

• Dockerized architecture with integrated Tor daemon
• Environment-based secure configuration
• Modular scraper, pipeline, monitor, and LLM layers

---

Architecture

graph TD
    User[User Browser] --> Streamlit[Streamlit Frontend]
    Streamlit --> Pipeline[Pipeline Controller]
    Pipeline --> SearchEngine[Search Engine Module]
    Pipeline --> Scraper[Scraper Module]
    Pipeline --> Monitor[Monitoring System]
    Pipeline --> Timeline[Timeline Tracker]
    
    SearchEngine --> TorProxy[Tor Proxy SOCKS5]
    Scraper --> TorProxy
    TorProxy --> OnionSites[Dark Web Onion Sites]
    
    Scraper --> BM25[BM25 Ranking Engine]
    BM25 --> LLM[Multi-Provider LLM Engine]
    
    LLM --> Claude[Anthropic Claude]
    LLM --> OpenAI[OpenAI GPT-4o]
    LLM --> Gemini[Google Gemini]
    LLM --> Groq[Groq Llama 3.3]
    LLM --> OpenRouter[OpenRouter]
    
    style Streamlit fill:#4a5568,stroke:#cbd5e0
    style Pipeline fill:#4a5568,stroke:#cbd5e0
    style BM25 fill:#4a5568,stroke:#cbd5e0
    style LLM fill:#742a2a,stroke:#fc8181
    style Claude fill:#742a2a,stroke:#fc8181
    style OpenAI fill:#742a2a,stroke:#fc8181
    style Gemini fill:#742a2a,stroke:#fc8181
    style Groq fill:#742a2a,stroke:#fc8181
    style OpenRouter fill:#742a2a,stroke:#fc8181
    style TorProxy fill:#4a5568,stroke:#cbd5e0

Loading

---

Installation

LLM Configuration

ROTTWEILER supports multiple LLM providers. You only need to configure the API keys for the providers you intend to use.

If an API key is not provided, that provider will not function.

All provider SDKs are included by default to ensure compatibility.

Prerequisites

• Python 3.9+
• Tor daemon
• Docker (optional)

Local Setup

git clone https://github.com/Rohankaf/rottweiler.git
cd rottweiler
pip install -r requirements.txt

# macOS
brew install tor
brew services start tor

# Ubuntu/Debian
sudo apt update && sudo apt install tor
sudo systemctl start tor

cp .env.example .env
# Add your API keys inside .env

streamlit run app.py

Access: http://localhost:8501

Docker Setup

docker-compose up -d
docker-compose logs -f
docker-compose down

Access: http://localhost:8501

Environment Configuration

ANTHROPIC_API_KEY=
OPENAI_API_KEY=
GOOGLE_API_KEY=
GROQ_API_KEY=
OPENROUTER_API_KEY=

TOR_PROXY_HOST=localhost
TOR_PROXY_PORT=9050
MAX_WORKERS=10
TIMEOUT_SECONDS=30

---

Legal Notice

ROTTWEILER is intended solely for lawful security research, threat intelligence, and educational purposes. Users are responsible for ensuring compliance with all applicable local, national, and international laws and regulations.

Unauthorized access to systems, misuse of collected information, or engagement in illegal activities is strictly prohibited. The authors and contributors assume no liability for misuse, damage, or legal consequences arising from the use of this software.

By using this tool, you agree to use it ethically and in accordance with applicable laws.

---

ROTTWEILER
Hunt. Analyze. Protect.