OUTFLAW: A Simple Engineering Blog

 Anticensorship Tool for Android can now be downloaded from here :  AntiCensorship Tool APK      It is a complete rewrite of my Anticensorship Tool in C/C++ for windows which was provided in my   earlier post  https://outflaw.blogspot.com/2020/01/bypassing-blocks-using-anticensorship.html   .  Note this is not an anonymity tool and will only unblock the site for you. Use it only for legal  purpose.  Source Code for this tool is available here :  https://github.com/GodwinUjeen/anti_censorship_tool  This new tool now available for Android was Developed by Godwin U using flutter as a joint project.  Keep visting our blog for more updates. :)          

Zoom 's software is well known for its poor security and privacy records. There has been recent outcry in the media about hackers selling Zoom 0 day Vulnerabilities in dark web. I tried some possible measures which we as an end user could do in order to limit impact of Zoom 0days. METHOD 1: Using Zoom in Web browser Most Web browsers restrict the amount of access a web page has on the device by restricting it in browser's sandbox. This effectively reduces the amount of damage an attacker can do to your device. Since a web page has less access to device compared to an App or Application it can lower risks of data compromise. However joining zoom meeting in browser has to enabled by the host in order to make this possible. METHOD 2: Using Zoom in a Sandbox According to Wikipedia , a sandbox is a security mechanism for separating running programs, usually in an effort to mitigate system failures or software vulnerabilities from spreading. It is often used to execut...

In my earlier blog post on defeating antivirus detection using Googleweblight , i had shown that googleweblight can be used to bypass firewalls. I have created a C program to make this unblocking process even more faster and easier. The program just manipulates the url and unblocks it. The link to Download the program is given below: -  AntiCensorship Toolv3 Download Here is a short tutorial on how to use the program:- STEP1 : Extract the zip file. STEP2 :Connect to internet and click the Program. STEP3: Wait till program connects the internet, this should normally take 4-5 seconds. STEP4: Enter the website to be unblocked. STEP5: Wait for program Menu. STEP6: Enter your choice . Note that Googleweblight and Hypothes.is would be better for connecting sites with videos and interactive content. Other services would be better for reading text. For Abuse prevention reasons i have choosed services which don't allow downloading files. STEP5: Please wait...

 No matter how many times security professionals warn people , many people still do use modified whatsapp versions and Cracked Software either to avoid paying license or to get extra cool features which are not available in original software . I decided to check most commonly used cracked softwares  to find if these apps are really safe enough using virustotal. First of all i uploaded GB whatsapp apk from  https://latestmodapks.com/gbwhatsapp-download-latest-version-android/ to Virustotal , this app seems to be bundled with ads ( the original whatsapp doesnot contain any ads.) , this might be annoying and dangerous, such ads can increase the risk of clicking Ads infected with malware or compromise your privacy by selling your data and this app  had 2 detections as malware in virustotal as shown in the image above.  In the case of Yowhatsapp it had single detection which labelled it as a potentially unwanted program.  The sample of Yowhatsapp w...

Googleweblight is a service from Google that helps to load webpages in mobile phones using slow internet connections. It seems this service can make content filters ineffective and even help malicious websites bypass antivirus detection if the malicious website is not in google safe browsing blacklist. I was actually looking for ways to access websites which blocked anonymous Tor users , I found that in most of the cheap 3G cell phones , browsers used Googleweblight service to improve Web browsing and it was highly effective in unblocking websites which blocked Tor . It made me wonder if it could be used by evil guys to bypass Antivirus firewalls too. I created a dedicated Windows 10 Virtual Machine with Bitdefender Total Security with  latest updates and took a random verified phishing URL from phishtank service and opened it firefox , Bitdefender immediately blocked access  to the dangerous phishing website ;)  However No warning was displayed by bitdefender whe...