Skip to content

Instantly share code, notes, and snippets.

View VillainsRule's full-sized avatar

VR VillainsRule

View GitHub Profile

Filter Bypasses

These are a ton of Unicode "look-alikes", meaning they can be used to bypass bad filters.

Character Fakes
a а
b 𝖻
c с
<Module>
<ModulePrefs title="[NAME HERE]" />
<Content type="html">
<![CDATA[
<iframe src="[WEBSITE HERE]" style="width: 100%;height:100%;border:none;position:absolute;top:0;left:0;" />
]]>
</Content>
</Module>
@VillainsRule
VillainsRule / admin.js.md
Created July 1, 2024 12:03
the shell shockers admin code.

yup, this holds the JS for the shell shockers admin panel.
have fun!

tools for reverse engineering things that involve large trees that piss me off

find by key
function findByKey(object, key, seen = new Set(), path = '') {
    if (seen.has(object)) return undefined;
    seen.add(object);