Database mode in Tortazo¶
Tortazo uses an internal SQLite database to store the TOR relays scanned with Nmap and hidden services discovered by the onion repository mode. The switch “-D / –use-database” allows to use the database records instead to perform a scan. This switch is very useful to use with some plugins which requires targets to attack or enumerate.
The core tables used by Tortazo in the version 1.1 are:
- Scan: Stores the date and number of relays found in every scan performed by Nmap.
- TorNodeData: Stores the information of relays found and the state of every one.
- TorNodePort: Stores the information of port states (closed, filtered or opened).
- OnionRepositoryResponses: Stores the responses from the HTTP connections performed against the hidden services in Onion Repository.
- OnionRepositoryProgress: Stores the progress for the Incremental search in the Onion Repository mode.
On other hand, the Crawler plugin stores the responses directly in the database, using the following structure
- CrawlerPluginPlage: Stores the pages and HTTP responses.
- CrawlerPluginImage: Stores the images found in the crawling process.
- CrawlerPluginPageImage: Stores the relation between the images found and the pages.
- CrawlerPluginForm: Stores the basic information about the forms found in the pages crawled by the plugin.
- CrawlerPluginFormControl: Stores the controls which are included in every form found.
The database schema in this mode is the following.