feat: Church of Malware edition

Forked from mikalv/awesome-i2p; extended with operator-focused curation —
OpSec & deanonymization research, I2P<->Tor bridging, self-hosted eepsites,
and research tooling. Learn the offense to build the defense. Authorized
research only. churchofmalware.org

README.md

@@ -9,6 +9,15 @@
 >
 > Check [status page](STATUSES.md) to know current projects state.
 
+---
+
+**⛧ Church of Malware edition ⛧** — maintained by the congregation at [churchofmalware.org](https://churchofmalware.org).
+Forked from [mikalv/awesome-i2p](https://github.com/mikalv/awesome-i2p) and extended with operator-focused
+resources: opsec, deanonymization research, I2P↔Tor bridging, and self-hosted eepsites.
+*Anonymity is a discipline, not a toggle. Study the attacks to survive them.* Authorized research only.
+
+---
+
 ## Contents
 
 - [Implementations](#implementations)
@@ -35,6 +44,11 @@
     - [Guides](#guides)
     - [Publications](#publications)
     - [Websites](#websites)
+- [Church of Malware — Curated Additions](#church-of-malware--curated-additions)
+    - [OpSec & Deanonymization Research](#opsec--deanonymization-research)
+    - [I2P ↔ Tor (bridging & comparison)](#i2p--tor-bridging--comparison)
+    - [Self-Hosted Eepsites](#self-hosted-eepsites)
+    - [Research Tooling](#research-tooling)
 - [Contributing](#contributing)
 
 ## Implementations
@@ -207,6 +221,34 @@
 * [i2pd.website](https://i2pd.website/) - I2Pd Website.
 * [i2pforum.net](https://i2pforum.net/) - The I2P forum.
 
+## Church of Malware — Curated Additions
+
+Operator- and researcher-focused resources curated by the congregation. Anonymity
+networks are studied here the way we study everything: **learn the offense to build
+the defense.** Authorized research only.
+
+### OpSec & Deanonymization Research
+* [Practical Attacks Against the I2P Network](https://wwwcip.informatik.uni-erlangen.de/~spjsschl/i2p.pdf) — the canonical attack survey. Read this *before* you trust the network.
+* [Identifying the true IP of I2P service hosts](http://www.irongeek.com/downloads/Identifying%20the%20true%20IP%20of%20I2P%20service%20hosts.pdf) — Irongeek on eepsite deanonymization. Know how you get caught.
+* **Router opsec** — keep your router's clearnet footprint minimal; never co-host a deanonymizable clearnet service on the same box. Treat metadata (uptime, timing, bandwidth) as identity.
+
+### I2P ↔ Tor (bridging & comparison)
+* [transi2p](https://github.com/rbif/transi2p) — transparent proxy for I2P, forwarding other addresses to Tor or clearnet.
+* [anonym8](https://github.com/HiroshiManRise/anonym8) — transparent proxy tunnel through Tor + I2P with DNS protection and ID spoofing.
+* **Different threat models, different tools:** I2P for eepsites/torrents/in-network services, Tor for clearnet exit. Don't conflate them.
+
+### Self-Hosted Eepsites
+* [railroad](https://github.com/eyedeekay/railroad) — single-user, self-hosted I2P blog.
+* [i2pd-webui](https://github.com/l-n-s/i2pd-webui) — i2pd web UI for managing your router and tunnels.
+* Pair with a hardened i2pd on a dedicated box (a Raspberry Pi works); see ek0ms savi0r's [darkWEB_server](https://github.com/ekomsSavior/darkWEB_server) for the Tor-side host-your-own pattern.
+
+### Research Tooling
+* [i2spy](https://github.com/chris-barry/i2spy) — collect stats from many I2P nodes (network research).
+* [darkweb_scanner](https://github.com/ekomsSavior/darkweb_scanner) — scan darkweb sites for vulnerabilities (**authorized research only**).
+
+> Additions are vetted by the congregation. Submit yours on the forge:
+> [git.churchofmalware.org](https://git.churchofmalware.org). ⛧
+
 ## Contributing
 
 Contributions welcome! Read the [contribution guidelines](CONTRIBUTING.md) first.