A Comprehensive Guide to the Kerberos Marketplace

This guide will teach you all you need to know about connecting to the Kerberos darknet market.

Kerberos Marketplace is a new darknet market that launched in February 2022. It employs the standard marketplace escrow mechanism, which requires consumers to deposit dollars before placing an order. It does not accept many advanced payment methods (though it does support Monero, which is accepted by almost all vendors on the site). It does not have many listings because it is a younger market, but it does contain a variety of features that are common in newer darknet markets (such as account 2-FA and well-categorized listings).

Kerberos’ marketplace has a graphically dense design, which makes it feel cluttered and even claustrophobic. However, we like that it is set to night mode by default and that it is still very easy to use. The Kerberos captcha systems are somewhat entertaining to us. They are distinct, effective in preventing bots, and yet remain unambiguous and reasonably simple to solve.

It is specifically mentioned in the market as “multi-layer encrypted,” and its maintainers provide a considerable amount of discussion to convince consumers that it is safer than most of its competitors. Regardless of whether this is true, we advocate utilizing it with basic safeguards, such as always encrypting your own shipping information and presuming it is being monitored by law enforcement. Another thing to bear in mind is that Kerberos appears to be UK-centric, so if you reside elsewhere, make sure you can find a dealer that will ship to your location before putting any payments.

Fundamentals of the Kerberos Market

  • Cryptocurrencies accepted: Bitcoin (BTC), Monero (XMR)
  • Total Product/Service listings: 1200
  • Listing Categories: Drugs & Chemicals, Fraud, Services, Counterfeit, Carded Items, Tutorials, Software & Malware, Hostings, Precious Metals, Gemstones, Jewellery
  • Multi-signature escrow? No
  • Finalize Early? Yes
  • Cost of vendor bond: $610

Before Getting Started

Before attempting to utilize Kerberos or any darknet market, you must be at least intermediately conversant with the following topics. Among them are the following:

  • Cryptocurrency transactions. You’ll need to know how to send and receive cryptocurrency; mainly Bitcoin (BTC) or Monero (XMR). We suggest using Monero whenever possible because of its privacy features which render its transactions largely untraceable on its blockchain.
  • The Tor browser. You’ll need to download the Tor browser to connect to Kerberos, which is what will allow you to access hidden sites like darknet markets.
  • OpSec. Short for “operations security,” OpSec is the art of putting yourself in the position of an adversary for the purpose of identifying weaknesses in your privacy practices. For example, you would never want to send Bitcoin or Monero straight from an exchange to a darknet market, because this could create a link between your real-life identity and perceived or actual illicit activity on the darknet. This is especially true if you provided the exchange with your KYC information.

Take the time to completely comprehend all of these principles since there is no replacement for adequate preparation when it comes to dark web transactions. A successful darknet market experience is inextricably linked to good OpSec.

Disclaimer: This guide is intended for research purposes only and should not be taken as legal or other advice. The authors of this handbook do not support unlawful conduct in your jurisdiction or others. You use the information in this guide and/or Kerberos at your own risk..

Making an Account

To begin making an account on Kerberos, click the “Register” button on the homepage screen. Before pressing the button, you must solve the short captcha (currently arithmetic-based), else it will simply reload the login screen.

You must supply a unique username (not related with any of your previous login credentials), a password (we recommend a random string of letters, numbers, and special symbols) entered twice, and a 6-digit withdrawal PIN to create an account. Entering an anti-phishing word is also a good idea. This sentence will appear every time you log in to the market to let you know you’re on a legitimate mirror and not a phishing site.

Following that, you must complete the captcha below, which includes selecting the eye color of one of three “full eyes” (the ones with the actual shape of the eye and not just the iris).

Then click “Register” to proceed. Your account will be created, and you will be taken to a screen with your account mnemonic displayed.

This code serves as a master password that may be used to recover your password and withdrawal PIN if you lose them. Keep this information in a safe and secure location where you won’t forget where it is. After that, click the “Continue” button. This will return you to the login screen. To log into the market, enter your freshly generated username and password, then solve the captcha. Please keep in mind that you must go through this initial welcome message before you may enter the market, which is displayed to all new users upon their first login:

“We are overjoyed that you have discovered your way to our demonic family.” We only have one question for you:

Please read and understand the Marketplace Rules and the Kerberos Guardian, and pay close attention to them. It also doesn’t hurt to read through the FAQ.

We treat everyone fairly and expect the same in return.

That’s all, my friend, and remember:

Be faithful to us, and we will never betray you. Yes, absolutely.”

You can now start browsing the market. Before you can make a purchase, you must first create a PGP key and put dollars into your account.

Making a PGP Key

To begin connecting a PGP public key to your account, first click the User Control Panel item in the menu box on the right side of the screen.

Then, in the left menu section, under My Account, pick “PGP Public Key.”

You will then be taken to the User Control Panel’s PGP Public Key area. By default, your status will be Unsupplied. Please read the following message regarding the need of adding a PGP key account to Kerberos:

“We strongly advise you to provide your PGP Public Key to the marketplace.”

You can only utilize Two-Factor-Authentication (2FA) after you have submitted your PGP Public Key to the marketplace. If you do not encrypt your delivery address, a vendor cannot send you encrypted PGP messages, and you cannot decrypt your delivery address that was encrypted using Kerberos during the purchase process. You also cannot utilize the Kerberos PGP encryption service on Kerberos Mail, for example.”

To do so, scroll down until you reach the text box labeled “Your PGP Public Key.” In this field, paste your PGP key. When entered correctly, it should appear like this:

To proceed, click the “Upload” button. You will then be shown an ownership verification message, which must be decrypted using the associated private key. Copy the complete contents of the message text field and decode it using your PGP software. You must paste the result into a text file and then copy only the Verification Code, which is 13 characters long. When the Verification Code is appropriately pasted into the corresponding field on Kerberos, it will appear like this:

To proceed, click “Verify.” If everything goes as planned, you will be returned to the top of the User Control Panel and presented with the message “Verification code -> Confirmed.” This implies that your PGP key is now associated with your account, and you will be able to receive encrypted messages from vendors and other users.

Select the “2FA Security” option in the left menu section of your User Control Panel if you wish to enable 2-FA for your account, which will require you to decrypt a PGP message each time you want to log into the market. This helps to strengthen account security by ensuring that no one can log into your account without your PGP private key.

Making a Down Payment

Because Kerberos use the standard account wallet system, you must first fund your account with Bitcoin (BTC) or Monero (XMR) before making a purchase. Because this type of structure makes the market vulnerable to exit scams, we recommend maintaining only enough dollars in your wallet to support one purchase at a time. To begin, click the “My Wallet” icon in the upper-right corner of the main menu area.

Following that, scroll down until you see deposit buttons for both supported coins.

We urge that you follow Kerberos’ instructions and use XMR whenever possible. If this is not possible, we propose just depositing mixed currencies (BTC that cannot be linked back to your blockchain history). The majority of vendors accept both BTC and XMR as payment. For the sake of this guide, we will make an XMR deposit, which we will begin by clicking the “Deposit: XMR” button. Scroll down until you see your Monero address in both text and QR code format, which should look like this:

Please keep in mind that your address is only valid for 48 hours after it is created, or until you make a deposit. You will be given a new one after you pay a deposit (each address is good for one deposit only). Before making your initial deposit, bear the following points in mind:

  • Kerberos will only process deposits greater than $10 in value (smaller deposits will be considered “donations” and will not be credited to your account).
  • Your deposit will be reflected in your balance after 10 confirmations (roughly 20-30 mins).

Remember that the price of Monero is particularly variable, so you may need to add an extra 5-10% to your balance to cover the cost of your order if the exchange rate changes. This is still another reason to only deposit enough funds to support one order at a time, and to execute the order as soon as the deposit is credited to your account.

Exploring Kerberos

Kerberos has a lot of features and a lot of graphical design, which can make surfing a little difficult. However, its interface remains similar to that of any other darknet market in that listing categories can be found in a panel on the left, with listings defaultly displayed by highest vendor reputation. Listings can be sorted by price and filtered by shipping from/to. They can also be listed in line format instead of the standard block style.

Box-style listings with the following information are available on the main category screen: price (in GBP and USD), coins accepted, Escrow or Finalize Early, and ship from/to. The following are the categories (and subcategories) of listings hosted by Kerberos:

  • Stimulants (Amphetamine, Cocaine, Crack, Other)
  • Cannabis (Buds & Flowers, Shake, Hash, Concentrates, Vaping, Synthetic, Edibles, Prerolls, Seeds, Other)
  • Ecstasy (Pills, MDMA, MDA, Methylone, Other)
  • Psychedelics (LSD, DMT, Mescaline, Mushrooms, 2C-x Series, 2C-T-x Series, 4-AcO-x Series, 4-HO-x Series, 5-MeO-x Series, Other)
  • Dissociatives (Ketamine, MXE, GHB, GBL, 3-MeO-PCP, Other)
  • Opiate (Heroin, Opium, Oxycodone, Codeine, Hydrocodone, Buprenorphine, Pills, Other)
  • Benzodiazepine (Xanax, Anti-Anxiety, Powder, RCs, Pills, Other)
  • Sexual Enhancers
  • Prescription Drugs
  • Steroids
  • Drugs & Chem (Other)
  • Fraud (CVV & Credit Cards, Accounts, Personal Information, Gift Cards, Scampages, Other)
  • Services (Carding, Registered IDs, SSN/DOB/Other, Documents – Physical, Documents – Digital, Transfers, Social Media, Hacking, Cracking, Social Engineering, Services – Physical, Services – Digital)
  • Counterfeit (Money, Jewelry, Watches, Clothes, Art, Electronics, Fake IDs, Fake Drivers Licenses, Fake Documents – Physical, Fake Documents – Digital, Counterfeit Physical, Counterfeit Digital)
  • Carded Items (Electronics, Other)
  • Tutorials (Drugs, Carding, Hacking, Money, Guides, Social Engineering, Other)
  • Software & Malware (Legit, Carded, Botnet, Malware, Trojans, Crackers, Exploits/Kits, Security Software, Commercial Software, Other)
  • Hostings (Cpanels, Servers, Domains, VPN, VPS, RDPs, Socks, Other)
  • Precious Metals (Gold, Silver, Platinum, Palladium, Other)
  • Gemstones (Diamonds, Rubies, Sapphires, Emeralds, Opals, Other)
  • Jewelry (Jewelry, Other)

Despite Kerberos’ abundance of categories and subcategories, real listings are fairly few, and many subcategories are empty. The majority of the market’s 1,250 or so listings are currently grouped into the Drugs, Fraud, and Tutorials areas. We enjoy the fact that Kerberos goes out of its way to provide so many subcategories, which can make it easier to find the things you’re looking for.

Clicking on a listing’s title or most anywhere else will bring up its details.

We can view more detailed information about the item here, such as the vendor’s reputation score, a breakdown of user feedback, the quantity for sale, and delivery options. By clicking on the various tabs, you may learn about shipping, feedback on the item, comments on the vendor, and the vendor’s refund policy.

We recommend reading through all of this material thoroughly before placing your first order with a vendor. This will ensure that you understand what you’re getting and what to expect while dealing with this vendor. Some sellers will want you to supply your shipping details in a specified format. Some suppliers provide a large range of delivery alternatives, while others only provide one or two.

Reading a vendor’s feedback history is probably the best way to ensure you aren’t being scammed, so we encourage doing so as well. Some suppliers may have an excellent track record save for a few negative evaluations. If the negative reviews are all recent, it could mean that the provider is presently defrauding its customers. Trust is everything in darknet markets like Kerberos. Legitimate suppliers who understand excellent business practices will not jeopardize their reputation and will usually collaborate with clients to ensure that all of their difficulties and complaints are addressed.

Making a Purchase

When you’ve chosen an item you want to buy, click the white “Select Shipping Option” button to the right of the price in the description box. This will take you to the order placement screen. Before you can place the order, make sure you have enough money in your wallet to cover the cost of the purchase. Read through the market messages that are specific to your item and vendor. You will be able to tell if it is a conventional Escrow order or a Finalize Early order (if it is the latter, you must release the funds to the vendor after it has been marked as Shipped by the vendor).

According to Kerberos, the entire market is “multi-layer encrypted,” and they will encrypt your shipping information for you using the vendor’s PGP key. We strongly advise you to complete the encryption yourself because it is the only sure way to ensure that your shipping information is only read by the vendor. This can be accessed by clicking on the vendor’s name (next to the image on the item page) and then selecting the PGP Public Key tab. You should copy this key, load it into your PGP application, and then use it to encrypt your shipping details.

Select the shipping option for this order (the market recommends requesting tracking information for your order, but it is not entirely necessary) and encrypt your shipping information with the vendor’s PGP key, then scroll down to the shipping information text box and paste your encrypted shipping information. When properly entered, it will appear like this:

After that, proceed by clicking the “Show” button immediately beneath the shipment info text box. Before placing the order, you will have the opportunity to review it on this order confirmation screen to ensure that everything seems correct.

It should be noted that the market charges a 2% commission on the buyer’s side of the transaction. After you have confirmed that you are happy with the amount to be paid, choose the coin choice with which you will pay for it (we recommend choosing XMR).

Your order will then be placed and delivered to the seller, who will begin preparing it. If you choose a standard escrow (“Escrow Service”) vendor, you will wait until you receive the goods to ensure that it meets your expectations before finalizing it. If you’re working with a Finalize Early (“FE”) vendor, you’ll finalize the order after the vendor marks it as shipped. To check the status of your order, go to the top right of the homepage menu section and click on the “My Purchases” icon.

If you do not receive your order or it is not satisfactory, you can file a Dispute from the My Purchases section. This will start a moderation procedure in which both the buyer and seller will be able to express their side of the story. We recommend avoiding this situation by contacting the vendor ahead of time and, perhaps more significantly, only working with vendors who have a track record of successful sales.

Kerberos Market URL: kerberoscwus5qit6l32wmg3hz6j3zverf33moas3wjcgaatchililqd.onion

Summary

Kerberos, while not particularly feature- or listing-rich, has the potential to become a solid darknet market in the future. The market’s sole serious complaint, other from the current paucity of merchants, is its reliance on the traditional market-held account wallet method. Aside from that, it appears to have everything in place to become a strong and long-lasting market. The market’s administrators have attempted to make its customers as comfortable as possible, but it is ultimately up to the user to safeguard themselves from an exit scam or worse.

To increase their chances of having a successful experience, users should only use XMR as payment, only deal with vendors who are either well-known outside the market or have multiple favorable feedbacks under their belt, and always self-encrypt their own shipping information. You should never maintain large sums of money on the market, or more than what is required to complete one order at a time.

Leave a Reply