Skip to content

Instantly share code, notes, and snippets.

View VillainsRule's full-sized avatar
😴
sleepy

VR VillainsRule

😴
sleepy
View GitHub Profile

Filter Bypasses

These are a ton of Unicode "look-alikes", meaning they can be used to bypass bad filters.

Character Fakes
a а
b 𝖻
c с
<Module>
<ModulePrefs title="[NAME HERE]" />
<Content type="html">
<![CDATA[
<iframe src="[WEBSITE HERE]" style="width: 100%;height:100%;border:none;position:absolute;top:0;left:0;" />
]]>
</Content>
</Module>
@VillainsRule
VillainsRule / admin.js.md
Created July 1, 2024 12:03
the shell shockers admin code.

yup, this holds the JS for the shell shockers admin panel.
have fun!

tools for reverse engineering things that involve large trees that piss me off

find by key
function findByKey(object, key, seen = new Set(), path = '') {
    if (seen.has(object)) return undefined;
    seen.add(object);
@VillainsRule
VillainsRule / cors.sh.md
Created May 6, 2025 16:18
cors.sh leaked api keys

take some paid cors.sh api keys!

live_6aba39ccdee8ed8b73605d0e20a44856036a469b78fd9fdbb2a0399951e920a1
live_2dd32c43499521e11bca38cdb4d743d3879fdd381335871930cfecc151dd6d4b
live_36d58f4c13cb7d838833506e8f6450623bf2605859ac089fa008cfeddd29d8dd

aaand a key checker for the sake of it: