{"@context":"https://schema.org","@type":"ItemList","name":"BotDigit Marketplace Products","url":"https://botdigit.com/products","numberOfItems":3,"itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"Product","name":"Dark Orbit Marketplace","description":"

# Dark Orbit – Multi-Vendor Marketplace & Telegram E-Commerce Platform

Dark Orbit is an e-commerce marketplace platform built on **Laravel 8** featuring multi-vendor capabilities, multi-currency cryptocurrency payment gateways (**Monero XMR, Bitcoin BTC, Litecoin LTC**), PGP-based two-factor authentication (2FA), an integrated **Telegram Bot** store interface, escrow & dispute management, and built-in Tor onion service support.

---

## Table of Contents

1. [Key Features](#key-features)

2. [Architecture Overview](#architecture-overview)

3. [Technology Stack](#technology-stack)

4. [Prerequisites](#prerequisites)

5. [Local Development Setup](#local-development-setup)

6. [Production Deployment Guide (botdigit.com)](#production-deployment-guide-botdigitcom)

- [1. Server Requirements & Dependencies](#1-server-requirements--dependencies)

- [2. Code Deployment & Permissions](#2-code-deployment--permissions)

- [3. Environment Configuration (.env)](#3-environment-configuration-env)

- [4. Database Setup & Migrations](#4-database-setup--migrations)

- [5. Nginx Web Server & SSL Configuration](#5-nginx-web-server--ssl-configuration)

- [6. Systemd Services (Telegram Bot & Queue Worker)](#6-systemd-services-telegram-bot--queue-worker)

- [7. Cryptocurrency Daemons (Monero / Bitcoin RPC)](#7-cryptocurrency-daemons-monero--bitcoin-rpc)

- [8. Tor Hidden Service (.onion Vanity Address)](#8-tor-hidden-service-onion-vanity-address)

7. [User Roles & Permissions](#user-roles--permissions)

8. [Directory Structure](#directory-structure)

9. [Maintenance & Useful Artisan Commands](#maintenance--useful-artisan-commands)

---

## Key Features

- **Multi-Vendor Marketplace**: Buyers, Sellers, Staff (Moderators), and Super Administrators.

- **Cryptocurrency Payment Integration**:

- **Monero (XMR)**: Subaddress generation, daemon RPC communication, automated balance and transaction verification.

- **Bitcoin (BTC)**: RPC daemon connection, multisig / direct escrow transaction processing.

- **Litecoin (LTC)**: Client RPC support via Payment Gateway module.

- **Escrow & Order Lifecycle**:

- State machine: `Pending` -> `Paid` -> `Dispatched` -> `Completed` / `Disputed` / `Cancelled` / `Finalized Early (FE)`.

- Automated escrow holding until buyer release or dispute resolution by staff.

- **Security & Privacy**:

- **PGP 2FA**: Encrypted challenge-response during login.

- **Security PIN & Secret Words**: Secondary authentication for sensitive financial transfers and withdrawals.

- **Auto-Logout & Session Invalidation**: Session expiration and data sanitization.

- **Captcha Integration**: Anti-bot challenge on registration and authentication endpoints.

- **Telegram Bot Storefront & Notifications**:

- Native Telegram bot interface supporting `/shop`, `/cart`, `/orders`, `/profile`, `/support`.

- Real-time order status, payment received, and dispute notifications via Telegram.

- **Support & Dispute Arbitration**:

- Ticket support system with direct buyer-seller-moderator resolution channels.

- Mass-messaging system for administrators to broadcast system notices.

- **Tor Onion Support**:

- Comes with `mkp224o` vanity onion address generator for hosting as a Tor v3 Hidden Service.

---

## Architecture Overview

```mermaid

graph TD

ClientWeb[Web Browser (botdigit.com)] -->|HTTPS / 443| Nginx[Nginx Reverse Proxy]

ClientTor[Tor Browser (.onion)] -->|SOCKS / Tor| TorDaemon[Tor Hidden Service]

TorDaemon --> Nginx

ClientTelegram[Telegram App] -->|Webhook / Polling| TGController[Telegram Bot Controller]

Nginx -->|FastCGI / PHP-FPM| LaravelApp[Laravel 8 Core Application]

LaravelApp --> DB[(MySQL / MariaDB)]

LaravelApp --> RedisCache[(Cache / Session Storage)]

LaravelApp --> MoneroRPC[Monero Wallet RPC (monero-wallet-rpc)]

LaravelApp --> BitcoinRPC[Bitcoin Core Daemon (bitcoind)]

```

---

## Technology Stack

- **Framework**: Laravel 8.x

- **Language**: PHP 8.0 - 8.3 (tested and compatible with PHP 8.x)

- **Database**: MySQL 8.0 / MariaDB 10.5+ (SQLite supported for local testing)

- **Web Server**: Nginx + PHP-FPM

- **Crypto Libraries**: `monero-integrations/monerophp`, `singpolyma/openpgp-php`

- **Bot SDK**: `irazasyed/telegram-bot-sdk`

- **Modular Engine**: `nwidart/laravel-modules`

---

## Prerequisites

Ensure the target system has:

- PHP >= 8.0 with extensions: `php-fpm`, `php-mysql`, `php-bcmath`, `php-mbstring`, `php-xml`, `php-curl`, `php-zip`, `php-gd`, `php-sqlite3`

- Composer 2.x

- MySQL 8.0+ / MariaDB

- Nginx

- Git & Unzip

---

## Local Development Setup

1. **Clone or Navigate to the Project**:

```bash

cd /Volumes/Mac2TB/Botdigit/Developer/Projects/darkorbit-main

```

2. **Install Dependencies**:

```bash

composer install

```

3. **Configure Environment File**:

```bash

cp .env.example .env

php artisan key:generate

```

4. **Run Database Migrations & Seeders**:

```bash

# If using SQLite for testing:

touch database/database.sqlite

php artisan migrate

php artisan db:seed

```

5. **Create an Initial Admin User**:

```bash

php artisan tinker --execute=\"

\\$user = new \\App\\Models\\User();

\\$user->id = (string) \\Illuminate\\Support\\Str::uuid();

\\$user->username = 'admin';

\\$user->password = bcrypt('YourPassword123');

\\$user->secret_word = bcrypt('supersecret');

\\$user->pin = bcrypt('123456');

\\$user->admin = 1;

\\$user->seller = 1;

\\$user->reference_code = \\Illuminate\\Support\\Str::random(15);

\\$user->save();

echo 'Admin Created: ' . \\$user->username . PHP_EOL;

```

6. **Start the Local Development Server**:

```bash

php artisan serve --port=8000

```

Open `http://127.0.0.1:8000` in your web browser.

---

## Production Deployment Guide (botdigit.com)

### 1. Server Requirements & Dependencies

On your Ubuntu/Debian production server:

```bash

sudo apt update && sudo apt upgrade -y

sudo apt install -y nginx mysql-server php8.2-fpm php8.2-mysql php8.2-bcmath \\

php8.2-mbstring php8.2-xml php8.2-curl php8.2-zip php8.2-gd php8.2-cli \\

composer git unzip tor supervisor certbot python3-certbot-nginx

```

### 2. Code Deployment & Permissions

Clone or copy the application to `/var/www/botdigit.com`:

```bash

sudo mkdir -p /var/www/botdigit.com

# Copy project files into /var/www/botdigit.com

cd /var/www/botdigit.com

composer install --no-dev --optimize-autoloader

# Set proper ownership and permissions

sudo chown -R www-data:www-data /var/www/botdigit.com

sudo find /var/www/botdigit.com -type f -exec chmod 644 {} \\;

sudo find /var/www/botdigit.com -type d -exec chmod 755 {} \\;

sudo chmod -R 775 /var/www/botdigit.com/storage /var/www/botdigit.com/bootstrap/cache

```

### 3. Environment Configuration (.env)

Edit `/var/www/botdigit.com/.env`:

```ini

APP_NAME=\"Dark Orbit\"

APP_ENV=production

APP_KEY=base64:YOUR_GENERATED_APP_KEY

APP_DEBUG=false

APP_URL=https://botdigit.com

DB_CONNECTION=mysql

DB_HOST=127.0.0.1

DB_PORT=3306

DB_DATABASE=darkorbit

DB_USERNAME=darkorbit_user

DB_PASSWORD=YOUR_STRONG_DATABASE_PASSWORD

SESSION_DRIVER=file

CACHE_DRIVER=file

QUEUE_CONNECTION=database

# Telegram Configuration

TELEGRAM_BOT_TOKEN=YOUR_TELEGRAM_BOT_TOKEN

TELEGRAM_WEBHOOK_URL=https://botdigit.com/telegram/webhook

TELEGRAM_WEBHOOK_TOKEN=YOUR_SECRET_WEBHOOK_TOKEN

# Monero / Bitcoin Node Settings

MONERO_HOST=127.0.0.1

MONERO_PORT=18083

MONERO_USERNAME=monero_rpc_user

MONERO_PASSWORD=monero_rpc_password

BITCOIND_HOST=127.0.0.1

BITCOIND_PORT=8332

BITCOIND_USERNAME=bitcoinrpc

BITCOIND_PASSWORD=bitcoin_rpc_password

```

### 4. Database Setup & Migrations

```sql

CREATE DATABASE darkorbit CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

CREATE USER 'darkorbit_user'@'localhost' IDENTIFIED BY 'YOUR_STRONG_DATABASE_PASSWORD';

GRANT ALL PRIVILEGES ON darkorbit.* TO 'darkorbit_user'@'localhost';

FLUSH PRIVILEGES;

EXIT;

```

Run migrations and seed default categories:

```bash

php artisan migrate --force

php artisan db:seed --force

php artisan config:cache

php artisan route:cache

php artisan view:cache

```

### 5. Nginx Web Server & SSL Configuration

Create the Nginx virtual host configuration: `/etc/nginx/sites-available/botdigit.com`

```nginx

server {

listen 80;

listen [::]:80;

server_name botdigit.com www.botdigit.com;

return 301 https://$host$request_uri;

}

server {

listen 443 ssl http2;

listen [::]:443 ssl http2;

server_name botdigit.com www.botdigit.com;

root /var/www/botdigit.com/public;

index index.php index.html;

# SSL Certificates (managed via Certbot)

# ssl_certificate /etc/letsencrypt/live/botdigit.com/fullchain.pem;

# ssl_certificate_key /etc/letsencrypt/live/botdigit.com/privkey.pem;

# Security Headers

add_header X-Frame-Options \"SAMEORIGIN\" always;

add_header X-XSS-Protection \"1; mode=block\" always;

add_header X-Content-Type-Options \"nosniff\" always;

add_header Referrer-Policy \"no-referrer-when-downgrade\" always;

charset utf-8;

location / {

try_files $uri $uri/ /index.php?$query_string;

}

location = /favicon.ico { access_log off; log_not_found off; }

location = /robots.txt { access_log off; log_not_found off; }

error_page 404 /index.php;

location ~ \\.php$ {

fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;

fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;

include fastcgi_params;

fastcgi_hide_header X-Powered-By;

}

location ~ /\\.(?!well-known).* {

deny all;

}

```

Enable the site and obtain SSL with Let's Encrypt:

```bash

sudo ln -s /etc/nginx/sites-available/botdigit.com /etc/nginx/sites-enabled/

sudo nginx -t

sudo systemctl reload nginx

# Issue Free SSL Certificate

sudo certbot --nginx -d botdigit.com -d www.botdigit.com

```

### 6. Systemd Services (Telegram Bot & Queue Worker)

To keep the Telegram bot polling and background queues running persistently:

#### A. Telegram Bot Service

Create `/etc/systemd/system/telegram-bot.service`:

```ini

[Unit]

Description=Dark Orbit Telegram Bot

After=network.target mysql.service

[Service]

User=www-data

Group=www-data

Restart=always

RestartSec=5

ExecStart=/usr/bin/php /var/www/botdigit.com/artisan telegram:polling

[Install]

WantedBy=multi-user.target

```

Enable and start the service:

```bash

sudo systemctl daemon-reload

sudo systemctl enable telegram-bot

sudo systemctl start telegram-bot

```

#### B. Queue Worker Service

Create `/etc/systemd/system/darkorbit-worker.service`:

```ini

[Unit]

Description=Dark Orbit Queue Worker

After=network.target

[Service]

User=www-data

Group=www-data

Restart=always

ExecStart=/usr/bin/php /var/www/botdigit.com/artisan queue:work --sleep=3 --tries=3

[Install]

WantedBy=multi-user.target

```

```bash

sudo systemctl enable darkorbit-worker

sudo systemctl start darkorbit-worker

```

### 7. Cryptocurrency Daemons (Monero / Bitcoin RPC)

#### Monero Wallet RPC Setup

Start `monero-wallet-rpc` with RPC authentication:

```bash

monero-wallet-rpc \\

--daemon-address node.monero.net:18081 \\

--rpc-bind-port 18083 \\

--rpc-bind-ip 127.0.0.1 \\

--rpc-login monero_rpc_user:monero_rpc_password \\

--wallet-file /var/monero/market_wallet \\

--password-file /var/monero/wallet_pass.txt \\

--disable-rpc-login=false \\

--confirm-external-bind

```

### 8. Tor Hidden Service (.onion Vanity Address)

Edit `/etc/tor/torrc`:

```ini

HiddenServiceDir /var/lib/tor/darkorbit_hidden_service/

HiddenServicePort 80 127.0.0.1:80

```

Restart Tor:

```bash

sudo systemctl restart tor

sudo cat /var/lib/tor/darkorbit_hidden_service/hostname

```

---

## User Roles & Permissions

| Role | Access Level | Description |

|---|---|---|

| **Buyer** | Default user | Browse categories, cart, checkout with BTC/XMR/LTC, leave feedback, open support & dispute tickets. |

| **Seller** | Vendor | Product management (listings, offers, delivery methods, images), sales dashboard, vacation mode. |

| **Staff / Mod**| Moderator | Notice management, featured products, dispute arbitration, support tickets, mass message broadcast. |

| **Admin** | Superuser | Full system control, category management, user edit/ban/impersonate, commission collection & fund withdrawal. |

---

## Directory Structure

```

darkorbit-main/

├── app/

│ ├── Http/

│ │ ├── Controllers/ # Admin, Auth, Index, Order, Product, Seller, Staff, Telegram, User

│ │ ├── Middleware/ # Auth, PGP 2FA, Role verifications

│ │ └── Requests/ # Form validations (Login, Register, etc.)

│ ├── Marketplace/ # Payment logic (Bitcoin, Monero, Multisig)

│ ├── Models/ # User, Product, Order, Dispute, TelegramUser, etc.

│ └── Tools/ # PGP cryptographic helpers, MoneroLib

├── config/ # coins.php, telegram.php, database.php, etc.

├── database/

│ ├── migrations/ # Table schemas (users, products, orders, telegram_users)

│ └── seeders/ # CategorySeeder, DatabaseSeeder

├── Modules/

│ ├── Forum/ # Internal community discussion forum

│ ├── Jabber/ # XMPP notification gateway

│ └── PaymentGateway/ # Multi-currency payment processing engine

├── public/ # Web assets (CSS, JS, images, uploaded media)

├── resources/views/ # Blade templates (marketplace, admin, auth, seller)

├── routes/web.php # Core routing definitions

└── mkp224o/ # Tor vanity key generator

```

---

## Maintenance & Useful Artisan Commands

```bash

# Clear application cache

php artisan cache:clear && php artisan config:clear && php artisan view:clear

# Optimize application for production

php artisan optimize

# Check Telegram Bot status & health

curl http://127.0.0.1:8000/telegram/health

# Run test suite

php artisan test

```

---

## License & Support

","image":"/api/v1/storage/public/products/covers/c08159a3-bcc0-40e6-8ff7-42256c0f3c27/cb3db43f-e02e-43c2-8361-c87110c7ad71.webp","offers":{"@type":"Offer","price":"50","priceCurrency":"USD","availability":"https://schema.org/InStock"}}},{"@type":"ListItem","position":2,"item":{"@type":"Product","name":"Smart Canteen System Website","description":"

YumYard – Smart Canteen Management System

YumYard is a modern Smart Canteen Management System designed to simplify food ordering and canteen operations for schools, colleges, offices, and organisations. It connects customers, vendors, and administrators through a single platform, making the entire ordering process faster, more organised, and completely digital.

Customers can browse menus, place orders, make secure online payments, and receive digital QR-based order verification for quick pickup. Kitchens can efficiently manage menus, orders, inventory, and sales, while administrators have complete control over users, vendors, analytics, and system settings.

YumYard reduces waiting times, minimises manual errors, and improves the overall food service experience through real-time order management, secure transactions, and an intuitive user interface.

Key Features

Smart digital food ordering
QR code-based order verification
Real-time order tracking
Secure online payments
Kitchen and Canteen dashboards for menu and order management
Admin panel for complete system control
Sales reports and analytics
User-friendly and responsive interface

YumYard is built to deliver a faster, smarter, and more efficient canteen experience for everyone.

","image":"/api/v1/storage/public/products/covers/0f088624-dd90-4063-ab61-ca9fdda6fa19/84c3b877-1e15-4b0c-98b4-6972037e3743.webp","offers":{"@type":"Offer","price":"199","priceCurrency":"USD","availability":"https://schema.org/InStock"}}},{"@type":"ListItem","position":3,"item":{"@type":"Product","name":"Eckmar Darkweb V3","description":"

ASPHODEL — Premium Cyber-Security Darknet Marketplace Template (Eckmar v3)

$\"Laravel$ $\"PHP$ $\"License\"$

ASPHODEL (Eckmar Darkweb v3) is a highly optimized, terminal-inspired dark web marketplace script built on Laravel 11.54.0 and PHP 8.4. It combines a sleek, matte-dark cyber-security aesthetic with robust, security-focused enhancements, fully optimized for anonymous browser clients.

🚀 Key Modern Enhancements

1. 🛡️ 100% JavaScript-Free Navigation

Designed strictly for high-security browser settings (such as the Tor Browser's safest level). All components—including recursive menus, dropdowns, advanced filters, and accordions—operate purely on native HTML5 (<details> / <summary>) and CSS3 styling, eliminating script-injection vectors.

2. 🖥️ Fullscreen Dashboard Console layout

Upgraded the core views into widescreen double-panel layouts (container-fluid) that fill the browser space cleanly. Features split-screen cards for both user profile settings and admin statistic centers, eliminating dead spacing.

3. 📁 Collapsible Categories Directory Tree

Root-level categories are expanded and visible by default on page load, while nested subcategories remain neatly collapsed. Child directories expand natively upon clicking and display custom indentation layout guidelines (├─, └─) for cohesive folder navigation.

4. 🎛️ Collapsible Advanced Search panel

The search console expands into a detailed filter panel (Price range, digital/physical tags, coin filters, sort configurations, and vendor profiles) using a clean details drawer that preserves user inputs without using JavaScript.

5. 📈 Hardware-Accelerated Crypto Prices Marquee

Injected a smooth, hardware-accelerated ticker (@keyframes ticker-slide) displaying real-time cryptocurrency exchange rates (BTC, ETH, XMR, LTC). Hovering over the ticker pauses the scrolling animation instantly (pause-on-hover) for comfortable reading.

6. 🔐 CompleteOpenPGP Facade

Replaced deprecated openpgp packages with the modern botdigit/completeopenpgp implementation, enabling clean RSA/PGP armor message encryption and signatures compatible with PHP 8.4 environments.

7. ⏱️ Automated Sandbox Reset Daemon

Includes a preconfigured demo reset module:

Displays Sandbox Credentials (admin & buyer accounts) directly on the login form for fast logins.
Features a RESET DATABASE button in the header banner.
Includes a background loop daemon php artisan demo:reset-loop that auto-refreshes database states back to defaults every 15 minutes.

8. 🛡️ IP Leak & Header Protection

Zero CDN Dependencies: Removed all Google Font preconnect links and clearnet CDN dependencies, ensuring no network requests leak client IP addresses to third-party servers.
Secure Headers Middleware: Integrated global response sanitization that automatically strips X-Powered-By and Server headers from HTTP responses to prevent software fingerprinting.
Local RPC Connections: Enforces local-only RPC nodes configuration, keeping backend crypto operations anonymous.
Proxy-Routed API Requests: Replaced plain file_get_contents clearnet HTTP requests in coin exchange rate converters with a secure, proxy-ready SecureRequest helper that supports routing over Tor/SOCKS5 proxy systems and fails safely with fallback rates (avoiding connection timeouts and origin leaks).
RFI/LFI Mitigation: Strictly routes views and controls via static, whitelisted parameters, preventing dynamic PHP inclusion (include/require) attack surfaces.

9. 🛡️ SQL Injection Immunity

PDO Parametric Binding: Built on standard Eloquent ORM abstractions to ensure all user inputs, search keywords, and filter queries are processed as bound parameters, eliminating raw query concatenation vectors.
Static Count Queries: Hardcoded database calculation clauses to ensure no dynamic column arguments can be injected.

💾 Installation & Setup

Set up the project instantly using the automated installer script:

Clone the Repository:

git clone git@github.com:EndGameddos/eckmar-darkweb-v3.git\ncd eckmar-darkweb-v3

Run the Installer:
```
./setup.sh
```
This script automates:
- Creating the .env configuration template.
- Initializing the SQLite database file (database/database.sqlite).
- Installing Composer dependencies.
- Generating the Laravel app key.
- Running fresh migrations and populating seeded marketplace records.
- Linking public assets directories.
Start the Servers:
- To run the local web server:
```
php artisan serve
```
- To start the 15-minute database reset daemon:
```
php artisan demo:reset-loop
```

","image":"/api/v1/storage/public/products/covers/c08159a3-bcc0-40e6-8ff7-42256c0f3c27/66567148-a48c-4248-a94a-1185c6af6c5a.webp","offers":{"@type":"Offer","price":"30","priceCurrency":"USD","availability":"https://schema.org/InStock"}}}]}