Tor Network news ecommrce script

Onion ecommerce script developer

Currently Viewing Posts Tagged Deep web

Onion network dark web templet

Visits: 715
Today: 9
Total: 346053

onion eCommerce Marketplace Script V1
This is a complete rewrite of my old script: onion eCommerce Marketplace Script. The two share some similarities (functional), but new version is written from scratch, meaning no code is shared between them.

Contact details

About script

onion eCommerce Marketplace Script v1 is also written in PHP with Laravel framework. It is using the latest standards for encryption (like Sodium library) and security. Its made without the use of JavaScript, so its optimized for TOR, but can also be run normally like any other web app (as you can see on demo).

Requirements

  • VPS with at least 2GB of RAM
  • Daemon for each coin that is enabled on marketplace

Server requirements: (what software is needed on VPS)

  • PHP 7 (recommended and tested on 7.2)
  • SQL Database (MySQL,PostgreSQL, SQLite, SQL Server)
  • Elasticsearch (Search interface that will keep track of search records and provide great search performance)
  • Redis (Optional, but will greatly increase app performance )

Features

Categories
Category system is very dynamic. Categories can be nested indefinitely. Creating, deleting and editing of categories is handled in admin panel.

Detailed home page
There is placeholder text on the home page at the moment that will represent the most important features of your marketplace.
On top of that, all users can see Top Vendors (Vendors with most sales), Latest Orders (Products of orders completed most recently, as well as order value, but no information about buyer or seller), Rising Vendors (Vendors with most sales in specified time frame, defaults to 7 days).
Official mirrors are a place where you can specify on what other links your website can be reached.

Password reset
Password can be reset with PGP Key added on account (more about PGP below) or with Mnemonic key provided during signup. The mnemonic key is shown only once and should be written down on paper. During signup, it is hashed (bcrypt) instantly and only stored in operating memory for the short time during display after which is cleared from memory manually as an addition to automatic PHP Garbage Collection.

PGP
Each user can add their on PGP key which is used for multiple features. Vendors must have PGP and 2FA enabled before they are allowed to upgrade from user to vendor status. If you have active PGP key you can reset your password with it or enable 2FA for your login. Each PGP key must be confirmed before is linked to account, and if you want to add new key you must first sign a message from the old one.
Messages can also be encrypted with user’s PGP key if its present (this is not enforced, its user’s choice).

2FA (Two-Factor Authentication)

If user has PGP key linked to their account, they can enable 2FA. If enabled, log in to marketplace will be prevented unless a randomly generated message is signed from the key.

Wishlist

Buyers do not need to save product links for later. On each product there is “Add to wishlist” button that can be used, and they are stored in user’s personal list for later.

Vendors

Normal users cannot post products on Marketplace. In order to post products you must become vendor. Before you can upgrade you must have PGP key and 2FA Enabled in your profile. Vendor price can be set in marketplace config. The vendor can use any of the coins available to purchase vendor status. Out of each vendor sale, a percentage of sale value goes to marketplace addresses.

Vendor profile customization

Vendors are able to customize their profile with pre-defined profile backgrounds and short personal description.

Vendor levels and XP

Each new vendor starts at Level 0 and progresses further based on performance. XP and the Amount of levels is dynamic and configurable. Multipliers determine how much XP is granted to/taken from vendors for each action. XP is granted/taken by formula: USDvalue*multiplier
Example:
     product_delivered multiplier is 20
     USD value of product is 100$
     When vendor successfully delivers product, he will receive 100*20=2000 XP
     This is an example from experience config file:
Code:   'multipliers' => [
        'product_delivered' => 10,
        'product_dispute_lost' =>20,
        // How much XP per star (given/taken based on feedback type)
        'feedback_per_star' => 2,
        // how much XP per USD value of transaction (given/taken based on feedback type)
        'feedback_per_usd' => 5,
    ]

Feedback

After each completed purchase, vendors are able to leave feedback. Feedback types are Positive, Neutral and Negative and they will affect vendor score as well as product score.

Multiple Coins

Probably the most important system is Coin System. Its completely dynamic, which means new coins can be added at any time. Standard version of marketplace comes with Bitcoin and Monero included. For each coin added, in marketplace config there can be set unlimited amount of marketplace addresses (used for receiving fees from purchases), and in case more than one address is present, address for receiving fee will be choosen randomly (for each purchase).

Product types
There are two product types. Physical and Digital products. Based on the type, different options are displayed during product creating and purchase.
Both Digital and Physical products support offers and custom units of measure (Item, kg, gram, piece …). With offers, vendors can give discounts on a purchase based on quantity. For example:
Price for 1 product is 100$
Price for 10 products is 90$
Price for 20+ products is 80$
Each of those is considered an offer and can be added/removed at any time.

Digital products support automatic delivery which is optional. If checked, the autofill system is used. Each line in textarea is treated as a single item and will be the product’s quantity. It will be instantly sent on the user upon purchase.

Physical products have delivery options. Each delivery option consists of: Name, Price, Expected delivery duration, Minimum quantity for delivery, Maximum Quantity for delivery. Physical products can also include/exclude countries from shipping.

Markdown styling
Instead of just plain text, product description and rules support markdown styling. Every tag is supported except URL tag.

Purchasing

When user chooses to purchase any product, he is able to pay with any coin supported by market (and vendor, since vendors can choose which coins they want on each product). There is no wallets or anything similar. Users do not need to keep money on marketplace at all times. For each purchase random address is generated, and its used for that purchase only.

Escrow

Escrow is present on every purchase by default. Upon purchase, marketplace address is generated that will hold funds. If purchase is completed if its marked as delivered or dispute is resolved. If buyer is unhappy with purchase he can open dispute and potentially (based on admin’s decision) get his money back. Upon purchase completion, based on result money will be sent from temporary purchase address to buyer/vendor and to one of the marketplace holding addresses.

Cart

If user wants to buy more than one product (maybe from different sellers too), they can add them all in a cart and then checkout only once.

Messages

Most important feature of messages is security. Marketplace uses latest algorithms and standards in Public Key Cryptography (like XChaCha20-Poly1305-IETF) to encrypt messages between users. Upon registration, Public and Private keys are created for each user. Based on user’s password an encryption key is derived, and that key is used to encrypt Private key, while Public Key is exposed. When user A whats to send message to user B, a key exchange happens. User A encrypts message with User B’s public key, and that message is stored in database. Only user B can read that message when he logs in and decrypts his messages with password. This system makes messages secure and unreadable by anyone, including marketplace administrator or basically anyone who can possibly get access to the database.

Messages are organized in conversations. Multiple conversations can be started at the same time.

Notifications

Users will get notifications for most actions that happen on marketplace regarding them. Some of the examples are: New message, Purchase status update (product sent, product delivered etc.), Vendor actions (Feedback) and so on.
They can be read in User Account Panel and deleted at any time.

Bitmessage

Marketplace can possibly connect to Bitmessage daemon. If connected, users can chose to add their Bitmessage addresses and get their notifications forwarded there. This means they will still get notifications even if they are not currently logged in, and they don’t need to refresh anything.
Before being able to forward notifications, Bitmessage addresses must be confirmed first.

JavaScript Warning

Optional warning can be enabled in marketplace config. If visitor has JavaScript enabled, a message will be displayed notifying them about security issues.

Support

Users can open support tickets regarding any problem they encounter. Administrators/Moderators will see this tickets in admin panel and can reply, or close them.

Admin Panel

Most of the stuff happening on marketplace can be viewed directly on admin panel. Administrators can access every feature on admin panel.

Moderators
Modular permission system is currently supported, which means admins can give/take some access to moderators (For example, support staff can only answer tickets and resolve disputes, community manager can only send mass messages etc.). Currently supported features:

  • Index – Basic information
  • Categories – Add/Edit/Remove Categories
  • Mass Messages – Ability to send messages to users by marketplace (Can be filtered to user groups)
  • Users – View users, search, filter, and edit each user individually.
  • Products – View, search, filter by user, or edit product
  • Log – Activity log of all Administrators/Moderators inside Admin Panel Example:

  • Bitmessage – Status of Bitmessage service (performs test), and view of marketplace bitmessage address
  • Disputes – View and resolve purchase disputes
  • Tickets – View and resolve support tickets
  • Purchases – List of all purchases
  • Vendor Purchases – List of vendor purchases

Supported coins

Marketplace currently supports these coins:

  • Bitcoin – Included in standard version
  • Monero – Included in standard version
  • Litecoin
  • DASH
  • PIVX
  • Verge
  • Bitcoin Cash

Installation

Marketplace installation instructions are included. These are not 100% copy paste but they do explain how must of the things work in detail.

Selling terms and conditions:

  • I’m selling the only script, I will help you install it with extra charges, edit it or whatever you want to do after you purchase it (I can do this for the right price and if I have time, contact me to check)
  • After purchase, you cannot resell or share this script
  • Script is tested for bugs but In case you find any, or any error in code it will be fixed with no additional charge
  • I will not give you files first in any case. I don’t care who you are, if you don’t trust me we will use escrow
  • In case of escrow I will deal only with bitcointalk trusted escrow (You can find list here)
  • Price stated below is for one copy of the script, which means I intend to sell it multiple times. In case you want to be the only buyer please contact me

DEMO LINK

Current price is: 1400$ in BTC equivalent (please note that this can be changed at any time)
For this price, you get a standard version of the marketplace with two coins (Bitcoin and Monero). If you want additional coins, they are charged separately.
Litecoin, DASH, PIVX are 50$ each, Verge is 60$ and Bitcoin Cash is 90$

Multi-Currency Module
Default marketplace currency is USD (converted to crypto at the moment of purchase). This module allows user to select local currency in profile (EUR, GBP, JPY…) and every price on marketplace will be converted to that. This module is optional and priced at 100$

There is 100$ discount available for anyone who bought original script onion eCommerce Marketplace Script
In order to apply for a discount, you must sign a message from an address that sent coins for purchase.

Contact details

  • Telegram: @develoerhacker  (Best way to reach me)
  • Bitcointalk Private Message

Deep web onion eCommerce Script

Visits: 272
Today: 3
Total: 346053

onion eCommerce Marketplace Script
This is a complete rewrite of my old script: onion eCommerce Marketplace Script. The two share some similarities (functional), but new version is written from scratch, meaning no code is shared between them.

Contact details

About script

onion eCommerce Marketplace Script v1 is also written in PHP with Laravel framework. It is using the latest standards for encryption (like Sodium library) and security. Its made without the use of JavaScript, so its optimized for TOR, but can also be run normally like any other web app (as you can see on demo).

Requirements

  • VPS with at least 2GB of RAM
  • Daemon for each coin that is enabled on marketplace

Server requirements: (what software is needed on VPS)

  • PHP 7 (recommended and tested on 7.2)
  • SQL Database (MySQL,PostgreSQL, SQLite, SQL Server)
  • Elasticsearch (Search interface that will keep track of search records and provide great search performance)
  • Redis (Optional, but will greatly increase app performance )

Features

Categories
Category system is very dynamic. Categories can be nested indefinitely. Creating, deleting and editing of categories is handled in admin panel.

Detailed home page
There is placeholder text on the home page at the moment that will represent the most important features of your marketplace.
On top of that, all users can see Top Vendors (Vendors with most sales), Latest Orders (Products of orders completed most recently, as well as order value, but no information about buyer or seller), Rising Vendors (Vendors with most sales in specified time frame, defaults to 7 days).
Official mirrors are a place where you can specify on what other links your website can be reached.

Password reset
Password can be reset with PGP Key added on account (more about PGP below) or with Mnemonic key provided during signup. The mnemonic key is shown only once and should be written down on paper. During signup, it is hashed (bcrypt) instantly and only stored in operating memory for the short time during display after which is cleared from memory manually as an addition to automatic PHP Garbage Collection.

PGP
Each user can add their on PGP key which is used for multiple features. Vendors must have PGP and 2FA enabled before they are allowed to upgrade from user to vendor status. If you have active PGP key you can reset your password with it or enable 2FA for your login. Each PGP key must be confirmed before is linked to account, and if you want to add new key you must first sign a message from the old one.
Messages can also be encrypted with user’s PGP key if its present (this is not enforced, its user’s choice).

2FA (Two-Factor Authentication)

If user has PGP key linked to their account, they can enable 2FA. If enabled, log in to marketplace will be prevented unless a randomly generated message is signed from the key.

Wishlist

Buyers do not need to save product links for later. On each product there is “Add to wishlist” button that can be used, and they are stored in user’s personal list for later.

Vendors

Normal users cannot post products on Marketplace. In order to post products you must become vendor. Before you can upgrade you must have PGP key and 2FA Enabled in your profile. Vendor price can be set in marketplace config. The vendor can use any of the coins available to purchase vendor status. Out of each vendor sale, a percentage of sale value goes to marketplace addresses.

Vendor profile customization

Vendors are able to customize their profile with pre-defined profile backgrounds and short personal description.

Vendor levels and XP

Each new vendor starts at Level 0 and progresses further based on performance. XP and the Amount of levels is dynamic and configurable. Multipliers determine how much XP is granted to/taken from vendors for each action. XP is granted/taken by formula: USDvalue*multiplier
Example:
     product_delivered multiplier is 20
     USD value of product is 100$
     When vendor successfully delivers product, he will receive 100*20=2000 XP
     This is an example from experience config file:
Code:   'multipliers' => [
        'product_delivered' => 10,
        'product_dispute_lost' =>20,
        // How much XP per star (given/taken based on feedback type)
        'feedback_per_star' => 2,
        // how much XP per USD value of transaction (given/taken based on feedback type)
        'feedback_per_usd' => 5,
    ]

Feedback

After each completed purchase, vendors are able to leave feedback. Feedback types are Positive, Neutral and Negative and they will affect vendor score as well as product score.

Multiple Coins

Probably the most important system is Coin System. Its completely dynamic, which means new coins can be added at any time. Standard version of marketplace comes with Bitcoin and Monero included. For each coin added, in marketplace config there can be set unlimited amount of marketplace addresses (used for receiving fees from purchases), and in case more than one address is present, address for receiving fee will be choosen randomly (for each purchase).

Product types
There are two product types. Physical and Digital products. Based on the type, different options are displayed during product creating and purchase.
Both Digital and Physical products support offers and custom units of measure (Item, kg, gram, piece …). With offers, vendors can give discounts on a purchase based on quantity. For example:
Price for 1 product is 100$
Price for 10 products is 90$
Price for 20+ products is 80$
Each of those is considered an offer and can be added/removed at any time.

Digital products support automatic delivery which is optional. If checked, the autofill system is used. Each line in textarea is treated as a single item and will be the product’s quantity. It will be instantly sent on the user upon purchase.

Physical products have delivery options. Each delivery option consists of: Name, Price, Expected delivery duration, Minimum quantity for delivery, Maximum Quantity for delivery. Physical products can also include/exclude countries from shipping.

Markdown styling
Instead of just plain text, product description and rules support markdown styling. Every tag is supported except URL tag.

Purchasing

When user chooses to purchase any product, he is able to pay with any coin supported by market (and vendor, since vendors can choose which coins they want on each product). There is no wallets or anything similar. Users do not need to keep money on marketplace at all times. For each purchase random address is generated, and its used for that purchase only.

Escrow

Escrow is present on every purchase by default. Upon purchase, marketplace address is generated that will hold funds. If purchase is completed if its marked as delivered or dispute is resolved. If buyer is unhappy with purchase he can open dispute and potentially (based on admin’s decision) get his money back. Upon purchase completion, based on result money will be sent from temporary purchase address to buyer/vendor and to one of the marketplace holding addresses.

Cart

If user wants to buy more than one product (maybe from different sellers too), they can add them all in a cart and then checkout only once.

Messages

Most important feature of messages is security. Marketplace uses latest algorithms and standards in Public Key Cryptography (like XChaCha20-Poly1305-IETF) to encrypt messages between users. Upon registration, Public and Private keys are created for each user. Based on user’s password an encryption key is derived, and that key is used to encrypt Private key, while Public Key is exposed. When user A whats to send message to user B, a key exchange happens. User A encrypts message with User B’s public key, and that message is stored in database. Only user B can read that message when he logs in and decrypts his messages with password. This system makes messages secure and unreadable by anyone, including marketplace administrator or basically anyone who can possibly get access to the database.

Messages are organized in conversations. Multiple conversations can be started at the same time.

Notifications

Users will get notifications for most actions that happen on marketplace regarding them. Some of the examples are: New message, Purchase status update (product sent, product delivered etc.), Vendor actions (Feedback) and so on.
They can be read in User Account Panel and deleted at any time.

Bitmessage

Marketplace can possibly connect to Bitmessage daemon. If connected, users can chose to add their Bitmessage addresses and get their notifications forwarded there. This means they will still get notifications even if they are not currently logged in, and they don’t need to refresh anything.
Before being able to forward notifications, Bitmessage addresses must be confirmed first.

JavaScript Warning

Optional warning can be enabled in marketplace config. If visitor has JavaScript enabled, a message will be displayed notifying them about security issues.

Support

Users can open support tickets regarding any problem they encounter. Administrators/Moderators will see this tickets in admin panel and can reply, or close them.

Admin Panel

Most of the stuff happening on marketplace can be viewed directly on admin panel. Administrators can access every feature on admin panel.

Moderators
Modular permission system is currently supported, which means admins can give/take some access to moderators (For example, support staff can only answer tickets and resolve disputes, community manager can only send mass messages etc.). Currently supported features:

  • Index – Basic information
  • Categories – Add/Edit/Remove Categories
  • Mass Messages – Ability to send messages to users by marketplace (Can be filtered to user groups)
  • Users – View users, search, filter, and edit each user individually.
  • Products – View, search, filter by user, or edit product
  • Log – Activity log of all Administrators/Moderators inside Admin Panel Example:

  • Bitmessage – Status of Bitmessage service (performs test), and view of marketplace bitmessage address
  • Disputes – View and resolve purchase disputes
  • Tickets – View and resolve support tickets
  • Purchases – List of all purchases
  • Vendor Purchases – List of vendor purchases

Supported coins

Marketplace currently supports these coins:

  • Bitcoin – Included in standard version
  • Monero – Included in standard version
  • Litecoin
  • DASH
  • PIVX
  • Verge
  • Bitcoin Cash

Installation

Marketplace installation instructions are included. These are not 100% copy paste but they do explain how must of the things work in detail.

Selling terms and conditions:

  • I’m selling the only script, I will help you install it with extra charges, edit it or whatever you want to do after you purchase it (I can do this for the right price and if I have time, contact me to check)
  • After purchase, you cannot resell or share this script
  • Script is tested for bugs but In case you find any, or any error in code it will be fixed with no additional charge
  • I will not give you files first in any case. I don’t care who you are, if you don’t trust me we will use escrow
  • In case of escrow I will deal only with bitcointalk trusted escrow (You can find list here)
  • Price stated below is for one copy of the script, which means I intend to sell it multiple times. In case you want to be the only buyer please contact me

DEMO LINK

Current price is: 1400$ in BTC equivalent (please note that this can be changed at any time)
For this price, you get a standard version of the marketplace with two coins (Bitcoin and Monero). If you want additional coins, they are charged separately.
Litecoin, DASH, PIVX are 50$ each, Verge is 60$ and Bitcoin Cash is 90$

Multi-Currency Module
Default marketplace currency is USD (converted to crypto at the moment of purchase). This module allows user to select local currency in profile (EUR, GBP, JPY…) and every price on marketplace will be converted to that. This module is optional and priced at 100$

There is 100$ discount available for anyone who bought original script onion eCommerce Marketplace Script
In order to apply for a discount, you must sign a message from an address that sent coins for purchase.

Contact details

  • Telegram: @develoerhacker  (Best way to reach me)
  • Bitcointalk Private Message

What exactly is the Darknet?

Clearnet
Visits: 384
Today: 4
Total: 346053
  • Darknet – A Darknet is an overlay network that can only be accessed with specific software, configurations, or authorization, often using non-standard communications protocols and ports.
  • Dark web – The Dark web is content that exists on Darknet, overlay networks that use the public Internet but which require specific software, configurations or authorization to access.
  • Deep web – The Deep web is parts of the World Wide Web whose contents are not indexed by standard search engines for any reason.
  • Clearnet – The Clearnet is a term typically referring to the unencrypted, or non-darknet. This traditional worldwide web has relatively low-base anonymity, with most websites routinely identifying users by their IP address.

To be clear, the Darknet is a dangerous place where illicit or underground activities are conducted and can be found if you look for them. One of the most predominant features found on the Darknet is the digital marketplaces where different types of goods and digital items are bought and sold mainly for bitcoin and other cryptocurrencies. Today we see a number of growing marketplaces found on both the Clearnet and the Darknet. These sites sell almost anything you can think of and are often a one-stop-shop for would-be criminals.

Items found in the marketplace include:

  • Software/Malware
  • Security/Hosting
  • Counterfeit
  • Drugs
  • Guns


Figure: 24 Hour DDoS service


Figure: DoS 0-day exploit for Telegram

[You might also like: Cyber Attack Market Place]

How do I get there from here?

People often think that accessing the Darknet is a technical and complicated task. In reality, accessing the Darknet has become very user-friendly over the last several years. Both I2P and Tor offer great documentation for novice users and there are plenty of forums and tutorials out there to help educate those that want to learn more about the networks. The only part of the Darknet that actually requires membership or invitation to join is certain marketplaces that want to control who can see and access the services that they are offering.

When accessing the Darknet you have many options to choose from. Two options include Tor, The Onion Router, and I2P, the Invisible Internet Project. Each has its own advantage and disadvantages and selection for use should be based on the user’s intentions.

Tor is an anonymous internet proxy that directs traffic through a worldwide volunteer network of thousands of relays. Tor wraps messages in encrypted layers and sends them through a bi-directional circuit of relays through the Tor network.  Tor also provides a central directory to manage the view of the network.

The Tor Project offers entry-level documentation for its new users and is easy to use. Tor over the years has become very popular with the common user. The Tor Browser Bundle made connecting to Tor very simple for the average user. Tor has received a large amount of academic review over the years and is a very well-funded project. One issue that still remains with Tor is the trust of exit nodes. Attackers can set up malicious exit nodes or spy on the traffic coming out of the network. The best use for Tor is for anonymous out proxing to the internet.

I2p is an anonymous peer-to-peer network overlay that focuses on internal services. It allows users to send data between computers running I2P with end-to-end encryption. I2P uses unidirectional tunnels and layered encryption versus Tor bi-directional tunnels.

I2P is not a very well-known service in comparison to Tor. It has received limited academic review but contains great documentation for all of its users. One issue regarding I2P is the limited number of out proxies to the internet. The best use for i2P is for peer-to-peer file sharing.

Accessing some of these market places on the Darknet can be a challenge if you do not know what you are looking for. Many times you can find lists of hidden services or .onion links on Clearnet sites like Reddit and DeepDotWeb. TheHiddenWiki.org is also a great place to start looking for hidden services and marketplaces along with DNstats.net. DNstats provides updated information about the current status of certain marketplaces along with news about new sites as they become available.

Darknet Marketplaces Include:

  • AlphaBay
  • Valhalla
  • Dream
  • Hansa
  • The Real Deal
  • DHL
  • Outlaw


Figure: DNstats, a Darknet status page

[You might also like: 5 Ways Hackers Market Their Services]

There are also a few search engines to help you find what you are looking for on the Darknet. Two popular Darknet search engines are Grams, http://grams7enufi7jmdl.onion/, a Google looking knockoff and Torch, http://xmh57jrzrnw6insl.onion/. Both of these sites will allow you to search for content in the marketplaces and other hidden services found on the Darknet.

Exploring the Dark Markets:

These markets are not exactly special or unique but they have grown in popularity following the Silk Roads takedown. Some markets can also be found on both the Darknet and the Clearnet. Sites like 0day today, hack forums, TorCrds, Hell and others sell similar items found on the Darknet and they almost always deal in bitcoin as well. You can also normally find some of the same services available on the Darknet on a number of hacker forums as well.

Hacker Forums

  • V3rmillion
  • Raid Forums
  • GreySec
  • RealForums
  • Evilzone


Figure: Torcrds.cc, a website selling stolen credit cards on the Clearnet


Figure: HackForums users selling SSDP NTP and DNS list for amplified attacks

Most vendors usually deal with Bitcoin or other types of cryptocurrencies. On many of the sites, the vendors have to pay some form of a bond to be allowed to sell items or services on the site. These bonds can cost anywhere between .1 to 1 BTC. Some of these sites are also closed to the public and require a referral to join the marketplace.

Some of the newest marketplaces this year include LEO Market, TheDetoxMarket and Apple Market. Last year there were around a dozen new sites that popped up. Some of these sites do not last long on the Darknet as they are often hacked or taken offline by their competition. The growth of the attack marketplace and the utilization of an anonymizing network like the Darknet will continue to grow over the next several years as the entry-level for hackers keeps lowering.