Database mode in Tortazo

Tortazo uses an internal SQLite database to store the TOR relays scanned with Nmap and hidden services discovered by the onion repository mode. The switch “-D / –use-database” allows to use the database records instead to perform a scan. This switch is very useful to use with some plugins which requires targets to attack or enumerate.

The core tables used by Tortazo in the version 1.1 are:

  • Scan: Stores the date and number of relays found in every scan performed by Nmap.
  • TorNodeData: Stores the information of relays found and the state of every one.
  • TorNodePort: Stores the information of port states (closed, filtered or opened).
  • OnionRepositoryResponses: Stores the responses from the HTTP connections performed against the hidden services in Onion Repository.
  • OnionRepositoryProgress: Stores the progress for the Incremental search in the Onion Repository mode.

On other hand, the Crawler plugin stores the responses directly in the database, using the following structure

  • CrawlerPluginPlage: Stores the pages and HTTP responses.
  • CrawlerPluginImage: Stores the images found in the crawling process.
  • CrawlerPluginPageImage: Stores the relation between the images found and the pages.
  • CrawlerPluginForm: Stores the basic information about the forms found in the pages crawled by the plugin.
  • CrawlerPluginFormControl: Stores the controls which are included in every form found.

The database schema in this mode is the following.