Gift: MMD VIP CODES + Requests (Mostly monthly updates)

[LuminosityNova]

I am doing a little testing where I intercept whitelist locally on my own machine using a software but it only works for every worlds that uses display name as their whitelisting.

I tried it over Nero's MMD VIP world but it returned garbled characters, which means it is encoded to something and I don't know how to decrypt and fool the system.

These two URLs were returned.

https://api.nero3d.dev/songs/encoded
https://api.nero3d.dev/vrchat/supporters/fcpf8gn49b

This is as far as I can go but if I got anything else I will keep an update.

[Lucian]

@LuminosityNova DM me your discord or telegram. I will hint you how to decode the patreon list.

i have been so super busy with work, i did not had time to fiddle with the small kinks.
But I certainly want to help people with creating their own encoded files.

I spent yesterday reverse engineering DisBridge and so far it work, which is nifty.

[LuminosityNova]

@lucian Sent you my contact and that's understandable Thanks in advance!
I wasn't aware that some worlds uses DisBridge nowadays but at least it's nice to hear that some progress are happening.

[kikeslammer88]

bump for gentlemen mmd code

[dexia_e6]

it was said 1743 its a patreon one

[tare1919]

I looked into Room for Dancing, and similar to Nero’s, it appeared to be accessing an external site to retrieve a VIP list.
The URL is below:

https://gist.github.com/chiseAIart/297fd9f7fed1b2a22041bb52207403dd

I don’t have knowledge about decompiling Udon, so I’m not sure what kind of encryption is being used.
Since all of the strings have the same length, could they be hashes of encrypted usernames or something like that?

[Lucian]

Progress with NEro MMD:

KeyHolder: 3HLgtTBrkuU964TABSnhCCnnMS3chPdGybU5PdTejPyA4Um2PNkHmReVTEoxQb9A

KeyHolder: fyQg2Twk

The patreon list and code are simple, and from now on, it take me just a couple minutes to download a world and reverse engineer the code to running state within unity. Along with a IL Assembly to udonSharp.

So from that moment i can update my github to generate encoded url payload with your vrchat username in it that you will be able to use with a proxy override to use that file locally instead of the one loaded from the URLs.

Meaning that it won't be possible to stop other than hardcoding the patreon name within the world itself. (which cause a 1gb of data to redownload every time the world is updated)

Either way, now that I have the entire code of the world, if this happen, I can just release a sample mmd world with all the song and animation ready to upload.

So keep in touch for future update on how to do all of this.

[kittymaid]

Would it be possible to know how to decode his list? I tried to figure it out myself but I'm having some trouble with it.

[ripper995948]

since everyone is talkin mmd here I would like to ask anyone know this world and its link? ty~

[dexia_e6]

https://vrchat.com/home/world/wrld_9dfca5db-495a-482b-9be9-1fed3e039e0e/info

[dexia_e6]

@ripper995948 MMD Club for Gentlemen

[ripper995948]

@dexia_e6 the map looks similar but this one has totally different song list. ig it's another different world

[Lucian]

it look like a rip of the gentleman mmd world but with sex animation.
This could be a private world, meaning that you need to know where those screenshot came from and who have a lead to the world id

[tare1919]

I believe it was created by the author of BS MMD World. I've visited it before, but I don't know the link.

[Munchies]

@tare1919 Got a name of the creator? I assume its 黒星「Blackstar」.

[insomnyawolf]

@LuminosityNova

First one is a JSON in Base64

Second one is more complicated, it also seems to be Base64 but has extra parts at the end, if you split them and try to go for the first one for example you get binary data that by measuring the entropy you can tell it's either compressed or encrypted, but that's how far i got by myself, by far lucian did a much better job than i did on figuring out how all that stuff works

@lucian could i get a hint as well?

[kittymaid]

The parts seem to be split into 4 sections after every && but it doesn't match any sort of encoding as far as I have tested it its most likely compressed binary i doubt its encrypted since it doesn't even match any of the existing hashes unless its both compressed and encrypted? disbridge seems to do the same thing

for example for Worlds Apart

after removing the 4 in the top section and running it through base64

and this goes for most worlds using disbridge.
would honestly love to know what the pipline for this is

[sephorith]

@Munchies went to check bs mmd world and mmd select wall is similar id say its the same creator

[Rittsuu]

@Lucian Hell yeah, amazing work!! I'd love to know how to decode this too, although i'm curious, is there a way to also unlock the "super spicy" code as well?

[Munchies]

@sephorith Hmm do you remember how long ago you made the screenshot? Can't seem to find the anything but the BS MMD World from the creator. Might have removed it.