VR VillainsRule

take some paid cors.sh api keys!

live_6aba39ccdee8ed8b73605d0e20a44856036a469b78fd9fdbb2a0399951e920a1
live_2dd32c43499521e11bca38cdb4d743d3879fdd381335871930cfecc151dd6d4b
live_36d58f4c13cb7d838833506e8f6450623bf2605859ac089fa008cfeddd29d8dd

aaand a key checker for the sake of it:

tools for reverse engineering things that involve large trees that piss me off

find by key

function findByKey(object, key, seen = new Set(), path = '') {
    if (seen.has(object)) return undefined;
    seen.add(object);

yup, this holds the JS for the shell shockers admin panel.
have fun!

Filter Bypasses

These are a ton of Unicode "look-alikes", meaning they can be used to bypass bad filters.

Character	Fakes
a	`а`
b	`𝖻`
c	`с`

	<Module>
	<ModulePrefs title="[NAME HERE]" />
	<Content type="html">
	<![CDATA[
	<iframe src="[WEBSITE HERE]" style="width: 100%;height:100%;border:none;position:absolute;top:0;left:0;" />
	]]>
	</Content>
	</Module>