spectacular-i2p/README.md

⛧ Spectacular I2P ⛧

· Church of Malware Edition ·

A curated grimoire of I2P implementations, tools, libraries, and research — hardened with operator opsec, deanonymization study, and self-hosted eepsites.

code is scripture · exploitation is sermon · defense is salvation

---

I2P — the Invisible Internet Project — is an anonymous overlay network, a network within a network, built to resist dragnet surveillance and traffic analysis. Where Tor optimizes for clearnet exit, I2P optimizes for in-network services: eepsites, anonymous torrents, encrypted mail, and peer-to-peer messaging, every endpoint addressed by a cryptographic destination.

Used by activists, journalists, whistleblowers, researchers — and anyone who treats privacy as a right, not a privilege. Anonymity is a discipline, not a toggle. Study the attacks to survive them.

⛧ Maintained by the congregation at churchofmalware.org · forked from mikalv/awesome-i2p · status: STATUSES.md · authorized research only.

---

Contents

• Getting Started
• Church Picks ⛧
• Implementations
  • I2P (Java)
  • I2Pd (C++)
  • Unfinished
• Projects using I2P
  • Automation
  • Cryptocurrencies
  • Docker
  • Email
  • Forum / Blog
  • Files / Sharing
  • Messaging
  • Tools
  • Torrents
  • Web
• Libraries
  • BOB
  • SAM
  • Other
• Resources
  • Documentation
  • Guides
  • Publications
  • Websites
• Church of Malware — Curated Additions
  • OpSec & Deanonymization Research
  • I2P ↔ Tor (bridging & comparison)
  • Self-Hosted Eepsites
  • Research Tooling
• Contributing

Getting Started

New to the network? Walk before you run an eepsite.

1. Install a router — i2pd (lean C++, recommended) or the Java I2P reference router. On Arch: pacman -S i2pd.
2. Let it integrate — a fresh router needs ~10–30 min to build tunnels and gather peers. Patience is opsec.
3. Point your browser — set the HTTP proxy to 127.0.0.1:4444. Use a dedicated browser profile; never mix an I2P identity with a clearnet one.
4. Explore — router console at http://127.0.0.1:7657, then visit an eepsite like http://identiguy.i2p.
5. Read before you trust — start with OpSec & Deanonymization Research. Know how the network fails before you rely on it.

Operator's rule: a router box is burned the moment it co-hosts a deanonymizable clearnet service. One identity per box. Metadata is identity.

Church Picks ⛧

The congregation's starting loadout — if you read nothing else:

Pick	What	Why
i2pd	router	lean, fast, scriptable
railroad + i2pd-webui	host your own	eepsite blog + tunnel management
transi2p	bridge	route I2P + Tor + clearnet by policy
Practical Attacks Against I2P	research	know the attacks before you trust the net
darkWEB_server	companion	the Church's Tor-side host-your-own pattern

Implementations

I2P

• I2P - The first implementation. Written in Java. Android release of the I2P router: Google Play, F-Droid.
• I2P+ - I2P+ is a soft-fork of the Java I2P Anonymizing Network Layer.

I2Pd

• I2Pd - A C++ implementation of a I2P router. Android release of the I2Pd router: F-Droid.
• Kovri - The Kovri I2P Router Project, a fork of I2Pd by the Monero project.

Unfinished

• go-i2p - A pure Go implementation of the I2P router.
• i2p-cs - I2P router in C#.
• i2pcpp - I2P C++ implementation.
• i2p-lite - I2P router implementation in C11.
• i2pd-rs - I2P Daemon written in Rust.
• ire - I2P router implementation in Rust.
• ri2p - Rust implementation of the i2p client/server/router protocols.

Projects using I2P

Automation

• anonym8 - Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
• cookbook-nginx-i2p - This Chef cookbook contains i2p-specifig config for logging i2p-desthashes. For ruby.
• i2pbootstrap - I2P Bootstrap script to automate much of the router setup process on remote servers.
• i2phosts - Automatic I2P Hosts synchronization I2P to Internet.

Cryptocurrencies

• anoncoin - Anoncoin (ANC) is a peer-to-peer digital cryptocurrency that focuses on privacy and anonymity for its users. Created in June 2013, it is the first and only currency to have built-in support for both the I2P darknet and Tor network that conceal the IP address of the user.
• bitcoin - Bitcoin Core. More info here.
• GOSTCoin - GOSTCoin (GST) is a digital currency based on blockchain technology. It allows instant payments worldwide with focus on privacy and security of its users.
• monero - Monero: the secure, private, untraceable cryptocurrency. It is open-source and accessible to all. With Monero, you are your own bank. Only you control and are responsible for your funds. Your accounts and transactions are kept private from prying eyes.

Docker

• i2p-docker - Java I2P router in Docker.
• i2pd - Official I2Pd docker image.
• i2pd-docker - Dockerfile and some scripts to run I2Pd in a container.
• meeh/i2p.i2p - Prebuilt I2P docker image.
• meeh/i2pd - Prebuilt I2Pd docker image.

Email

• bdsmail - Brain Dead Simple Mail Server.
• i2p.i2p-bote - I2P-Bote is a plugin for I2P that allows users to send and receive emails while preserving privacy. It does not need a mail server because emails are stored in a distributed hash table. They are automatically encrypted and digitally signed, which ensures no one but the intended recipient can read the email, and third parties cannot forge them.
• i2pboted - Go implementation of I2P/Bote.
• pboted - Standalone C++ client for I2P/Bote e-mail exchange protocol.

Forum / Blog

• i2p.syndie - Syndie is an open source system for operating distributed forums, offering a secure and consistent interface to various anonymous and non-anonymous content networks.
• cliqueclique - P2P forum on top of I2P.
• railroad - A simple, single-user, self-hosted blogging system for I2P.
• syndie-core - CLI, network, and database backend for syndie-gui.
• syndie-gui - Syndie GUI frontend for syndie-core.

Files / Sharing

• i2pfsd - I2P-based high available shared filesystem server.
• muwire - MuWire file sharing client for I2P.
• tahoe-lafs-i2p - Tahoe-LAFS is a Free and Open decentralized cloud storage system. It distributes your data across multiple servers. Even if some of the servers fail or are taken over by an attacker, the entire file store continues to function correctly, preserving your privacy and security.

Messaging

• MaladaN-Messenger-Client - An end to end encrypted Messenger that uses the signal protocol over the I2P network.
• MaladaN-Messenger-Server - MaladaN Messenger Server end, for messaging using the signal protocol through I2P.
• i2pchat - I2PChat. Previously I2P Qt Messenger.

Tools

• I2PMonitor - I2P monitor and control application for Mac OS X.
• i2p-control - Go terminal application for talking to i2pcontrol.
• i2p-reseeder - I2P Reseeder written in Python (WSGI).
• i2p-tools - This tool provides a secure and efficient reseed server for the I2P network. There are several utility commands to create, sign, and validate SU3 files.
• i2p-tools - Assorted I2P tools and scripts.
• i2pberry - I2Pberry - I2P for the Raspberry Pi.
• i2pd-tools - Some useful tools for I2P.
• i2spy - Takes stats from many I2P nodes, and holds them in a centralized location.
• pyreseeder - Reseed data managment tools for I2P.
• si-i2p-plugin - An experimental approach to provide a destination-isolating mechanism for http-over-i2p.
• transi2p - Transparent proxying for I2P and forwarding other addresses to Tor or clearnet.

Torrents

• Transmission-I2P - Anonymous torrent client Transmission-I2P.
• XD - BitTorrent Client written in Go.
• samtracker - HTTP Bittorrent tracker with automatic port-forwarding to I2P.

Web

• darkweb-everywhere - HTTPS Everywhere rulesets for hidden services and eepsites.
• fl - Reverse proxy to Flibusta via Tor or I2P.
• i2p.to-web - Web portion of i2p.to, an I2P inProxy.
• i2pd-webui - Fancy I2Pd web user interface.
• i2pdbrowser - I2Pd browser bundle.
• i2pjump - I2P jump service. A sort of slave DNS server for I2P.
• py-i2phosts - py-i2phosts is a hostnames registration engine for I2P.
• specter - Easy to use secure I2Pd browser

Libraries

BOB

• bobcpp - C++ BOB library.
• i2p.rb - I2P.rb is a Ruby library for interacting with the I2P anonymity network. SAM and BOB.
• txi2p - I2P bindings for Twisted. SAM and BOB.

SAM

• I2PSharp - C# library implementation of the I2P SAM v3.3 protocol.
• Jsam - A Java library for i2p's SAM API.
• Py2p - Python interface to I2P.
• goSam - A Go library for using the I2P Simple Anonymous Messaging (SAM version 3.0) bridge.
• haskell-network-anonymous-i2p - Haskell API for I2P anonymous networking.
• i2p-rs - Rust client library for interacting with I2P.
• i2p-sam - TypeScript. I2P SAM: peer-to-peer communication between applications over I2P.
• i2p.rb - I2P.rb is a Ruby library for interacting with the I2P anonymity network. SAM and BOB.
• i2p.socket - drop in python socket module that uses I2P.
• i2pdotnet - .NET library for using the I2P Simple Anonymous Messaging (SAM v3.0) bridge.
• i2plib - Python bindings for SAMv3.
• i2plib-fork - Fork of i2plib with some fixes and bb32 support.
• i2psam - C++ SAMv3 library.
• libsam3 - C SAMv3 library.
• mooni2p - Lua library for working with the I2P network
• node-i2p - NodeJS api for communicating over I2P (SAMv3 client).
• php-sam - Basic SAMv3 implementation in PHP.
• solitude - I2P SAMv3 library in Rust (WIP).
• txi2p - I2P bindings for Twisted. SAM and BOB.
• libtorrent-rasterbar - libtorrent is a popular C++ BitTorrent library that has support for I2P.

Other

• libsyndie - Syndie library written in Go (see also: syndie-gui or syndie-core).
• libtorrent-i2p - libtorrent modified to download torrents anonymously.
• samrtc - webRTC over I2P via SAM.

Resources

Documentation

• geti2p.net/spec - I2P Specification Documents.
• bote.readthedocs.io - I2P/Bote Protocol Specification.

Guides

• tutorial-darknet - Follow up files/scripts for I2Pd+VPN+Ubuntu remote I2P router setup.

Publications

• Peer Profiling and Selection in the I2P Anonymous Network
• Anonymity Techniques - Usability Tests of Major Anonymity Networks
• Darknets and hidden servers: Identifying the true IP/network identity of I2P service hosts
• Privacy-Implications of Performance-Based Peer Selection by Onion-Routers: A Real-World Case Study using I2P
• I2P Usability vs. Tor Usability A Bandwidth and Latency Comparison
• Monitoring the I2P network
• I2P's Usage Characterization
• A survey on solutions and main free tools for privacy enhancing Web communications
• A Bird's Eye View on the I2P Anonymous File-sharing Environment
• Improving Content Availability in the I2P Anonymous File-Sharing Environment
• Practical Attacks Against the I2P Network

Websites

• geti2p.net - The Invisible Internet Project Website.
• i2pd.website - I2Pd Website.
• i2pforum.net - The I2P forum.

Church of Malware — Curated Additions

Operator- and researcher-focused resources curated by the congregation. Anonymity networks are studied here the way we study everything: learn the offense to build the defense. Authorized research only.

OpSec & Deanonymization Research

• Practical Attacks Against the I2P Network — the canonical attack survey. Read this before you trust the network.
• Identifying the true IP of I2P service hosts — Irongeek on eepsite deanonymization. Know how you get caught.
• Router opsec — keep your router's clearnet footprint minimal; never co-host a deanonymizable clearnet service on the same box. Treat metadata (uptime, timing, bandwidth) as identity.

I2P ↔ Tor (bridging & comparison)

• transi2p — transparent proxy for I2P, forwarding other addresses to Tor or clearnet.
• anonym8 — transparent proxy tunnel through Tor + I2P with DNS protection and ID spoofing.
• Different threat models, different tools: I2P for eepsites/torrents/in-network services, Tor for clearnet exit. Don't conflate them.

Self-Hosted Eepsites

• railroad — single-user, self-hosted I2P blog.
• i2pd-webui — i2pd web UI for managing your router and tunnels.
• Pair with a hardened i2pd on a dedicated box (a Raspberry Pi works); see ek0ms savi0r's darkWEB_server for the Tor-side host-your-own pattern.

Research Tooling

• i2spy — collect stats from many I2P nodes (network research).
• darkweb_scanner — scan darkweb sites for vulnerabilities (authorized research only).

Additions are vetted by the congregation. Submit yours on the forge: git.churchofmalware.org. ⛧

Contributing

Contributions welcome! Read the contribution guidelines first. Submit additions on the forge: git.churchofmalware.org. Thanks to all contributors — upstream and congregation alike.

---

⛧ benediction ⛧

may your tunnels hold and your destination stay nameless.

churchofmalware.org · maintained by the congregation · authorized research only

_{Inherits the spirit of the upstream awesome-i2p — knowledge wants to be free.}