ASPHODEL (Eckmar Darkweb v3) is a highly optimized, terminal-inspired dark web marketplace script built on Laravel 11.54.0 and PHP 8.4. It combines a sleek, matte-dark cyber-security aesthetic with robust, security-focused enhancements, fully optimized for anonymous browser clients.

Designed strictly for high-security browser settings (such as the Tor Browser's safest level). All components—including recursive menus, dropdowns, advanced filters, and accordions—operate purely on native HTML5 (<details> / <summary>) and CSS3 styling, eliminating script-injection vectors.

Upgraded the core views into widescreen double-panel layouts (container-fluid) that fill the browser space cleanly. Features split-screen cards for both user profile settings and admin statistic centers, eliminating dead spacing.

Root-level categories are expanded and visible by default on page load, while nested subcategories remain neatly collapsed. Child directories expand natively upon clicking and display custom indentation layout guidelines (├─, └─) for cohesive folder navigation.

The search console expands into a detailed filter panel (Price range, digital/physical tags, coin filters, sort configurations, and vendor profiles) using a clean details drawer that preserves user inputs without using JavaScript.

Injected a smooth, hardware-accelerated ticker (@keyframes ticker-slide) displaying real-time cryptocurrency exchange rates (BTC, ETH, XMR, LTC). Hovering over the ticker pauses the scrolling animation instantly (pause-on-hover) for comfortable reading.

Replaced deprecated openpgp packages with the modern botdigit/completeopenpgp implementation, enabling clean RSA/PGP armor message encryption and signatures compatible with PHP 8.4 environments.

Includes a preconfigured demo reset module:

• Displays Sandbox Credentials (admin & buyer accounts) directly on the login form for fast logins.
• Features a RESET DATABASE button in the header banner.
• Includes a background loop daemon php artisan demo:reset-loop that auto-refreshes database states back to defaults every 15 minutes.

• Zero CDN Dependencies: Removed all Google Font preconnect links and clearnet CDN dependencies, ensuring no network requests leak client IP addresses to third-party servers.
• Secure Headers Middleware: Integrated global response sanitization that automatically strips X-Powered-By and Server headers from HTTP responses to prevent software fingerprinting.
• Local RPC Connections: Enforces local-only RPC nodes configuration, keeping backend crypto operations anonymous.
• Proxy-Routed API Requests: Replaced plain file_get_contents clearnet HTTP requests in coin exchange rate converters with a secure, proxy-ready SecureRequest helper that supports routing over Tor/SOCKS5 proxy systems and fails safely with fallback rates (avoiding connection timeouts and origin leaks).
• RFI/LFI Mitigation: Strictly routes views and controls via static, whitelisted parameters, preventing dynamic PHP inclusion (include/require) attack surfaces.

• PDO Parametric Binding: Built on standard Eloquent ORM abstractions to ensure all user inputs, search keywords, and filter queries are processed as bound parameters, eliminating raw query concatenation vectors.
• Static Count Queries: Hardcoded database calculation clauses to ensure no dynamic column arguments can be injected.

Set up the project instantly using the automated installer script:

1. Clone the Repository:

   git clone [email protected]:EndGameddos/eckmar-darkweb-v3.git
   cd eckmar-darkweb-v3

2. Run the Installer:

   ./setup.sh

   This script automates:

   • Creating the .env configuration template.
   • Initializing the SQLite database file (database/database.sqlite).
   • Installing Composer dependencies.
   • Generating the Laravel app key.
   • Running fresh migrations and populating seeded marketplace records.
   • Linking public assets directories.

3. Start the Servers:

   • To run the local web server:

     php artisan serve

   • To start the 15-minute database reset daemon:

     php artisan demo:reset-loop