Fullz Shop • Auto-Carding Panel • Gift Card Generator • BTC Mixer • Email Blaster • Telegram Bot
Full nulled PHP scripts ready to deploy. These are the same scripts used by major carding shops and Telegram-based operations. Fully functional, no encoded files, easily customizable.
Each script includes:
- Full source code (PHP + HTML + CSS + JS)
- SQL dump for database setup
- Installation guide
- Admin panel details
- Telegram bot integration (where applicable)
| # | Script | Description | Price |
| 1 | Fullz Shop v3.0 | Complete fullz selling platform with search, filter, cart | $75 |
| 2 | Auto-Carding Panel v2.5 | Automated carding interface with checker + checkout | $120 |
| 3 | Gift Card Generator Pro | Generates gift card codes + balance checker | $50 |
| 4 | BTC Mixer / Tumbler | Bitcoin mixing service with logs + fee system | $100 |
| 5 | Email Blaster v4.0 | Bulk email sender with SMTP rotator + template engine | $60 |
| 6 | Telegram Bot Shop | Full Telegram shop bot (cards, fullz, accounts) | $40 |
| 7 | CC Checker Panel | BIN-based CC checker with Stripe/PayPal API | $80 |
| 8 | Scam Page Hosting Panel | Host + manage phishing pages with analytics | $90 |
SCRIPT 1: FULLZ SHOP v3.0
Features:
- User registration/login system
- Fullz browsing with filters (country, state, credit score, bank)
- Shopping cart + checkout system
- Bitcoin/Monero payment integration
- Auto-delivery after payment confirmation
- Admin panel: add fullz, manage users, view sales
- Search by BIN, state, credit score range
- Rating system for fullz quality
- Escrow integration option
- Telegram notifications for new sales
Code:
-- Fullz Shop Database Schema
CREATE TABLE users (
id INT AUTO_INCREMENT PRIMARY KEY,
username VARCHAR(50) UNIQUE,
password VARCHAR(255),
email VARCHAR(100),
balance DECIMAL(10,2) DEFAULT 0.00,
role ENUM('user', 'admin', 'vip') DEFAULT 'user',
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);
CREATE TABLE fullz (
id INT AUTO_INCREMENT PRIMARY KEY,
full_name VARCHAR(100),
ssn VARCHAR(11),
dob DATE,
dl_number VARCHAR(50),
dl_state VARCHAR(2),
address TEXT,
city VARCHAR(100),
state VARCHAR(50),
zip VARCHAR(10),
phone VARCHAR(20),
email VARCHAR(100),
mmn VARCHAR(100),
credit_score INT,
bank_name VARCHAR(100),
has_cc BOOLEAN DEFAULT 0,
price DECIMAL(8,2),
status ENUM('available', 'sold') DEFAULT 'available',
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);
CREATE TABLE orders (
id INT AUTO_INCREMENT PRIMARY KEY,
user_id INT,
fullz_id INT,
amount DECIMAL(10,2),
payment_method VARCHAR(20),
payment_status ENUM('pending', 'confirmed') DEFAULT 'pending',
txid VARCHAR(255),
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
FOREIGN KEY (user_id) REFERENCES users(id),
FOREIGN KEY (fullz_id) REFERENCES fullz(id)
);
CREATE TABLE pages (
id INT AUTO_INCREMENT PRIMARY KEY,
title VARCHAR(255),
slug VARCHAR(255) UNIQUE,
content TEXT,
last_updated TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
);
Code:
<?php
// fullz_shop/index.php — Fullz Shop Main Page
session_start();
require_once 'config.php';
require_once 'functions.php';
// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
header('Location: login.php');
exit;
}
$user_id = $_SESSION['user_id'];
// Get filter parameters
$country = $_GET['country'] ?? '';
$min_score = $_GET['min_score'] ?? 0;
$max_score = $_GET['max_score'] ?? 850;
$search = $_GET['search'] ?? '';
// Build query
$where = "WHERE status = 'available' AND credit_score BETWEEN ? AND ?";
$params = [$min_score, $max_score];
if ($country) {
$where .= " AND state = ?";
$params[] = $country;
}
if ($search) {
$where .= " AND (full_name LIKE ? OR ssn LIKE ? OR city LIKE ?)";
$search_term = "%$search%";
$params = array_merge($params, [$search_term, $search_term, $search_term]);
}
// Pagination
$page = $_GET['page'] ?? 1;
$per_page = 20;
$offset = ($page - 1) * $per_page;
// Count total
$count_stmt = $pdo->prepare("SELECT COUNT(*) FROM fullz $where");
$count_stmt->execute($params);
$total = $count_stmt->fetchColumn();
$total_pages = ceil($total / $per_page);
// Fetch fullz
$stmt = $pdo->prepare("SELECT * FROM fullz $where ORDER BY created_at DESC LIMIT $per_page OFFSET $offset");
$stmt->execute($params);
$fullz_list = $stmt->fetchAll();
?>
<!DOCTYPE html>
<html>
<head>
<title>BlackSec Market — Fullz Shop</title>
<style>
* { margin: 0; padding: 0; box-sizing: border-box; }
body {
font-family: 'Segoe UI', monospace;
background: #0a0a0a;
color: #e0e0e0;
}
.header {
background: linear-gradient(135deg, #1a1a2e, #16213e);
padding: 20px 40px;
border-bottom: 2px solid #ff4444;
}
.header h1 { color: #ff4444; font-size: 24px; }
.header .balance { float: right; color: #00ff00; }
.filters {
background: #111;
padding: 20px 40px;
border-bottom: 1px solid #333;
}
.filters input, .filters select {
background: #1a1a1a;
color: #e0e0e0;
border: 1px solid #444;
padding: 8px 12px;
margin-right: 10px;
border-radius: 3px;
}
.filters button {
background: #ff4444;
color: white;
border: none;
padding: 8px 20px;
cursor: pointer;
border-radius: 3px;
}
.fullz-grid {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(350px, 1fr));
gap: 15px;
padding: 20px 40px;
}
.fullz-card {
background: #151515;
border: 1px solid #2a2a2a;
border-radius: 5px;
padding: 15px;
transition: border-color 0.3s;
}
.fullz-card:hover {
border-color: #ff4444;
}
.fullz-card .name {
color: #ffd700;
font-size: 16px;
font-weight: bold;
}
.fullz-card .details {
margin-top: 10px;
font-size: 13px;
color: #aaa;
}
.fullz-card .details span {
display: block;
margin: 3px 0;
}
.fullz-card .price {
color: #00ff00;
font-size: 18px;
font-weight: bold;
margin-top: 10px;
}
.fullz-card .buy-btn {
background: #ff4444;
color: white;
border: none;
padding: 10px;
width: 100%;
cursor: pointer;
margin-top: 10px;
border-radius: 3px;
font-weight: bold;
}
.pagination {
text-align: center;
padding: 20px;
}
.pagination a {
color: #ff4444;
padding: 5px 10px;
margin: 0 3px;
text-decoration: none;
}
</style>
</head>
<body>
<div class="header">
<h1>🛒 BlackSec Fullz Market</h1>
<div class="balance">Balance: $<?= number_format($_SESSION['balance'], 2) ?></div>
</div>
<div class="filters">
<form method="GET">
<input type="text" name="search" placeholder="Search name/SSN/city..." value="<?= htmlspecialchars($search) ?>">
<input type="number" name="min_score" placeholder="Min credit score" value="<?= $min_score ?>" style="width:130px">
<input type="number" name="max_score" placeholder="Max credit score" value="<?= $max_score ?>" style="width:130px">
<select name="country">
<option value="">All States</option>
<option value="CA" <?= $country == 'CA' ? 'selected' : '' ?>>California</option>
<option value="TX" <?= $country == 'TX' ? 'selected' : '' ?>>Texas</option>
<option value="NY" <?= $country == 'NY' ? 'selected' : '' ?>>New York</option>
<option value="FL" <?= $country == 'FL' ? 'selected' : '' ?>>Florida</option>
</select>
<button type="submit">Filter</button>
</form>
</div>
<div class="fullz-grid">
<?php foreach ($fullz_list as $fullz): ?>
<div class="fullz-card">
<div class="name"><?= htmlspecialchars($fullz['full_name']) ?></div>
<div class="details">
<span>📍 <?= htmlspecialchars($fullz['city']) ?>, <?= $fullz['state'] ?> <?= $fullz['zip'] ?></span>
<span>🆔 SSN: ***-**-<?= substr($fullz['ssn'], -4) ?></span>
<span>📅 DOB: <?= $fullz['dob'] ?></span>
<span>🏦 Bank: <?= htmlspecialchars($fullz['bank_name'] ?: 'N/A') ?></span>
<span>📊 Credit: <?= $fullz['credit_score'] ?></span>
<span>💳 CC Attached: <?= $fullz['has_cc'] ? '✓ YES' : '✗ NO' ?></span>
</div>
<div class="price">$<?= number_format($fullz['price'], 2) ?></div>
<form method="POST" action="cart.php">
<input type="hidden" name="fullz_id" value="<?= $fullz['id'] ?>">
<button type="submit" class="buy-btn">Add to Cart</button>
</form>
</div>
<?php endforeach; ?>
</div>
<div class="pagination">
<?php for ($i = 1; $i <= $total_pages; $i++): ?>
<a href="?page=<?= $i ?>&country=<?= $country ?>&min_score=<?= $min_score ?>&search=<?= urlencode($search) ?>">
<?= $i ?>
</a>
<?php endfor; ?>
</div>
</body>
</html>
SCRIPT 2: AUTO-CARDING PANEL v2.5
Features:
- Multi-site checkout automation
- BIN checking + validation built in
- Proxy rotator with geo-matching
- Stripe Radar score checker
- AVS response parser
- 3DS detection
- Session management
- Results dashboard with analytics
- Export working cards to CSV
- Multi-user support with permissions
Code:
<?php
// card_panel/check.php — CC Checker Module
session_start();
require_once 'config.php';
require_once 'bin_lookup.php';
require_once 'proxy_manager.php';
class CCChecker {
private $pdo;
private $proxy;
private $session;
public function __construct() {
global $pdo;
$this->pdo = $pdo;
$this->proxy = new ProxyManager();
$this->session = new SessionManager();
}
public function checkCard($card_data) {
$bin = substr($card_data['number'], 0, 6);
$results = [];
// Step 1: BIN validation
$bin_info = $this->lookupBin($bin);
$results['bin'] = $bin_info;
if (!$bin_info['valid']) {
return ['status' => 'invalid_bin', 'message' => 'Invalid BIN', 'results' => $results];
}
// Step 2: Luhn check
if (!$this->luhnCheck($card_data['number'])) {
return ['status' => 'luhn_fail', 'message' => 'Failed Luhn check', 'results' => $results];
}
// Step 3: Get proxy matching BIN country
$proxy = $this->proxy->getProxyForCountry($bin_info['country']);
if (!$proxy) {
return ['status' => 'no_proxy', 'message' => 'No matching proxy', 'results' => $results];
}
// Step 4: Auth attempt
$auth_result = $this->attemptAuth($card_data, $proxy);
$results['auth'] = $auth_result;
// Log result
$this->logCheck($card_data, $auth_result, $bin_info);
return [
'status' => $auth_result['status'],
'message' => $auth_result['message'],
'results' => $results,
'bin_info' => $bin_info
];
}
private function luhnCheck($number) {
$sum = 0;
$alt = false;
for ($i = strlen($number) - 1; $i >= 0; $i--) {
$digit = intval($number[$i]);
if ($alt) {
$digit *= 2;
if ($digit > 9) $digit -= 9;
}
$sum += $digit;
$alt = !$alt;
}
return ($sum % 10 == 0);
}
private function lookupBin($bin) {
$bin_db = new BINLookup();
return $bin_db->lookup($bin);
}
private function attemptAuth($card, $proxy) {
// This would integrate with Stripe/PayPal/Authorize API
// For demonstration — in production, this uses actual payment gateway auth
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://api.stripe.com/v1/charges');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
'amount' => 100, // $1.00 test charge
'currency' => 'usd',
'source' => 'tok_visa', // test token
'description' => 'Card check - BlackSec Panel'
]));
curl_setopt($ch, CURLOPT_HTTPHEADER, [
'Authorization: Bearer ' . STRIPE_TEST_KEY,
'Content-Type: application/x-www-form-urlencoded'
]);
curl_setopt($ch, CURLOPT_PROXY, $proxy['url']);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
$data = json_decode($response, true);
if ($http_code == 200 && isset($data['id'])) {
// Void the charge
$this->voidCharge($data['id']);
return ['status' => 'approved', 'message' => 'Card approved', 'charge_id' => $data['id']];
} else {
$error = $data['error']['code'] ?? 'unknown';
return ['status' => 'declined', 'message' => $error, 'charge_id' => null];
}
}
private function voidCharge($charge_id) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://api.stripe.com/v1/charges/$charge_id/refund");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
'Authorization: Bearer ' . STRIPE_TEST_KEY
]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_exec($ch);
curl_close($ch);
}
private function logCheck($card, $result, $bin_info) {
$stmt = $this->pdo->prepare("
INSERT INTO card_checks
(user_id, bin, card_last4, status, message, bin_country, bin_score, proxy_ip, checked_at)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, NOW())
");
$stmt->execute([
$_SESSION['user_id'],
substr($card['number'], 0, 6),
substr($card['number'], -4),
$result['status'],
$result['message'],
$bin_info['country'] ?? '',
$bin_info['score'] ?? 0,
$this->proxy->getCurrentIP()
]);
}
}
SCRIPT 3: TELEGRAM BOT SHOP
Telegram Bot — Full Automated Shop:
Code:
Bot Features:
- /start — Welcome message with inline keyboard
- /menu — Main menu (Browse, Balance, Support)
- Category-based product browsing
- Cart system with inline buttons
- Crypto payment (BTC/XMR) via API
- Auto-delivery on payment confirmation
- Admin panel: add/remove products, view stats
- User verification system
Bot Flow:
1. User starts bot → sees welcome + buy button
2. User clicks "Browse Products" → sees categories
3. User selects "Fullz" → sees price tiers
4. User selects tier → bot shows sample + asks for confirmation
5. User confirms → bot generates BTC invoice
6. Bot watches blockchain for payment (every 60 seconds)
7. Payment confirmed → bot sends fullz via DM
8. Bot asks for rating → stores feedback
Admin Commands:
/add_fullz — Add fullz to inventory (upload CSV)
/stats — Daily/weekly/monthly sales stats
/broadcast — Send message to all users
/ban — Ban user by ID
Code:
<?php
// telegram_bot/bot.php — Telegram Bot Main Handler
require_once 'config.php';
require_once 'crypto_payments.php';
define('BOT_TOKEN', 'YOUR_BOT_TOKEN_HERE');
define('API_URL', "https://api.telegram.org/bot" . BOT_TOKEN . "/");
function sendMessage($chat_id, $text, $keyboard = null) {
$data = ['chat_id' => $chat_id, 'text' => $text, 'parse_mode' => 'HTML'];
if ($keyboard) $data['reply_markup'] = json_encode($keyboard);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, API_URL . 'sendMessage');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
curl_close($ch);
return json_decode($result, true);
}
function answerCallback($callback_id, $text) {
$data = ['callback_query_id' => $callback_id, 'text' => $text];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, API_URL . 'answerCallbackQuery');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_exec($ch);
curl_close($ch);
}
function editMessage($chat_id, $message_id, $text, $keyboard = null) {
$data = [
'chat_id' => $chat_id,
'message_id' => $message_id,
'text' => $text,
'parse_mode' => 'HTML'
];
if ($keyboard) $data['reply_markup'] = json_encode($keyboard);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, API_URL . 'editMessageText');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
curl_close($ch);
return json_decode($result, true);
}
// Handle incoming updates
$update = json_decode(file_get_contents('php://input'), true);
if (isset($update['message'])) {
$message = $update['message'];
$chat_id = $message['chat']['id'];
$text = $message['text'] ?? '';
$user_id = $message['from']['id'];
// Get or create user
$stmt = $pdo->prepare("SELECT * FROM tg_users WHERE tg_id = ?");
$stmt->execute([$user_id]);
$user = $stmt->fetch();
if (!$user) {
$stmt = $pdo->prepare("INSERT INTO tg_users (tg_id, username, joined_at) VALUES (?, ?, NOW())");
$stmt->execute([$user_id, $message['from']['username'] ?? '']);
}
// Handle commands
switch (true) {
case $text == '/start':
$keyboard = [
'inline_keyboard' => [
[['text' => '🛒 Browse Products', 'callback_data' => 'browse']],
[['text' => '💰 Balance', 'callback_data' => 'balance']],
[['text' => '❓ Help', 'callback_data' => 'help']]
]
];
sendMessage($chat_id,
"👋 <b>Welcome to BlackSec Shop!</b>\n\n"
. "We offer premium fullz, CCs, and accounts.\n"
. "All payments in BTC/XMR. Auto-delivery.\n\n"
. "Use the menu below to get started:",
$keyboard);
break;
case $text == '/admin' && $user_id == ADMIN_ID:
$keyboard = [
'inline_keyboard' => [
[['text' => '📊 Stats', 'callback_data' => 'admin_stats']],
[['text' => '➕ Add Fullz', 'callback_data' => 'admin_add']],
[['text' => '📢 Broadcast', 'callback_data' => 'admin_broadcast']],
[['text' => '👥 Users', 'callback_data' => 'admin_users']]
]
];
sendMessage($chat_id, "⚡ <b>Admin Panel</b>", $keyboard);
break;
}
}
// Handle callback queries
if (isset($update['callback_query'])) {
$callback = $update['callback_query'];
$chat_id = $callback['message']['chat']['id'];
$message_id = $callback['message']['message_id'];
$data = $callback['data'];
$callback_id = $callback['id'];
switch ($data) {
case 'browse':
$keyboard = [
'inline_keyboard' => [
[['text' => '💳 Fullz Packages', 'callback_data' => 'cat_fullz']],
[['text' => '🏦 Bank Drops', 'callback_data' => 'cat_drops']],
[['text' => '📧 Accounts/Logs', 'callback_data' => 'cat_accounts']],
[['text' => '🔧 Tools', 'callback_data' => 'cat_tools']],
[['text' => '◀️ Back', 'callback_data' => 'main_menu']]
]
];
editMessage($chat_id, $message_id, "📂 <b>Browse Categories</b>\n\nSelect a category:", $keyboard);
answerCallback($callback_id, '');
break;
case 'cat_fullz':
$keyboard = [
'inline_keyboard' => [
[['text' => '🥇 Platinum (740+) — $80', 'callback_data' => 'buy_fullz_platinum']],
[['text' => '🥈 Gold (680+) — $50', 'callback_data' => 'buy_fullz_gold']],
[['text' => '🥉 Silver (620+) — $30', 'callback_data' => 'buy_fullz_silver']],
[['text' => '⬇️ Sample Fullz (Free)', 'callback_data' => 'buy_fullz_sample']],
[['text' => '◀️ Back', 'callback_data' => 'browse']]
]
];
editMessage($chat_id, $message_id, "💳 <b>Fullz Packages</b>\n\n"
. "All fullz include:\n"
. "✓ Full Name\n✓ SSN\n✓ DOB\n"
. "✓ DL# + State\n✓ Address\n"
. "✓ Phone + Email\n✓ MMN\n"
. "✓ Credit Score + Bank Info\n\n"
. "Instant delivery after payment.", $keyboard);
answerCallback($callback_id, '');
break;
}
}
// Handle payment confirmations (webhook from BTC processor)
$payment_data = json_decode(file_get_contents('php://input'), true);
if (isset($payment_data['txid'])) {
$txid = $payment_data['txid'];
$amount = $payment_data['amount'];
$stmt = $pdo->prepare("SELECT * FROM tg_invoices WHERE txid = ?");
$stmt->execute([$txid]);
$invoice = $stmt->fetch();
if ($invoice && $invoice['status'] == 'pending') {
// Mark paid
$stmt = $pdo->prepare("UPDATE tg_invoices SET status = 'paid', paid_at = NOW() WHERE id = ?");
$stmt->execute([$invoice['id']]);
// Deliver product
$stmt = $pdo->prepare("SELECT * FROM fullz WHERE id = ?");
$stmt->execute([$invoice['product_id']]);
$product = $stmt->fetch();
$product_text = "✅ <b>Payment Confirmed!</b>\n\n"
. "Here's your fullz:\n\n"
. "<code>"
. "Name: {$product['full_name']}\n"
. "SSN: {$product['ssn']}\n"
. "DOB: {$product['dob']}\n"
. "DL: {$product['dl_number']}\n"
. "Address: {$product['address']}\n"
. "City: {$product['city']}, {$product['state']}\n"
. "Zip: {$product['zip']}\n"
. "Phone: {$product['phone']}\n"
. "Credit: {$product['credit_score']}\n"
. "</code>\n\n"
. "Thanks for your purchase!\n"
. "⭐ Rate us: /rate";
sendMessage($invoice['user_id'], $product_text);
}
}
All scripts are available individually or as a bundle. Bundle discounts available for 3+ scripts.
Code:
To purchase:
1. Send a DM with the script numbers you want
2. Receive BTC invoice
3. Pay → Receive download link + documentation
4. Setup support included for first 48 hours
Payment: Bitcoin (BTC) or Monero (XMR) only
Delivery: Within 2 hours of payment confirmation
Support: Setup assistance included
Bundle pricing:
3 scripts: 15% off
5 scripts: 25% off
All 8 scripts: 35% off + free future updates