how to open banned websites with proxy sites ?

There are many sites which are blocked by government because of breaking laws of their country. The user downloads many softwares to open these sites but end up being infected by  malware, virus. Today i will share a trick with you guys which can help you easily open these banned sites without downloading anything. As you know that there are many online proxies but everyone need a proxy server which is faster and trusted. Here in this post I am revealing an online proxy and a tutorial to open banned sites with the help of these online proxies which is trusted and fast. Just follow my step to open banned sites.

How To Open Banned Site ?

1. Open www.incloak.com in your browser.
You can also use any proxy site from list below

• List Of Good Proxy Sites

2. After that enter the URL of the site which you want to open like below.

3. Now click the Hide Me button and enjoy

how does the free services and softwares can cost high ?

Of course it is awesome to get something totally free of cost, isn’t it? But are you aware that the free thing can cost you much more in near future. How? Let us study. Many of the service and softwares are sold free of cost just to populate it in a large number of people. Some ‘business minded’ individuals thought that it would be ‘cool’ to add some advertisements to such applications to earn money. As ‘Excess of anything is bad’, too much of greed and rise in difficulty in advertising led to the birth of adware and spyware.

Adware is type of malware, which misleads, corrupts and harasses the users by popping out unwanted or irrelevant advertisements. They sometimes consist of viruses and Trojans. While the spywares, justifying its name, spies on the user’s activities and online behaviour and reports to the concerned person.

How bad they can be?

Adwares and spywares being malware can affect you and your website or system to a greater extent.

• They can help intruders add viruses and Trojans into website and system.
• They can help other malwares to be injected into your website and system.
• Can slow down your website/system’s performance.
• Clashes with other softwares and tools.
• Help hackers gain access to your credentials.
• Can result in to theft of your valuable data and sometimes even money.
• If you are an adware-spyware victimized website, you may become the source of spreading the viruses and Trojans and hence can get blacklisted and ultimately can lose reputation.

How can you prevent being a victim?

Now, that you aware regarding the ill-effects of the adwares and spywares, you should be cautious while exploring the Internet.

Following points will help you keep a safe distance from adwares and spywares:

• Avoid visiting on suspicious website: Don’t get into those websites which is not trustworthy or is famous or experienced as a spreader of malwares. Stay away from Piracy; often the pirated softwares contain viruses and Trojans (avoid sites like warez).
• Don’t click on the pop-ups and other ads: Never get drifted away by the pop-ups and ads especially those asking “click here” or “Yes or No” even asked while installing the software.
• Give a little test to pass: Softwares like Spychecker can help you out to find whether the software you are going to install is bugged with a spyware or not.
• Secure your system: Install anti-virus softwares and keep them updated. They will help you around detecting the viruses and Trojans and will also help remove them.
• Use Firewall: Firewall helps prevent entry of hackers and will always ask permission before allowing any traffic to enter. As in the case of Adware and spyware they definitely need to deliver their information collected and with Firewall on, you can successfully stop them doing so.
• Scan your website/system: Get a malware/adware/spyware scanner installed. Scanning will not only help you detect the injected malicious substance but also removes them, if found any. Ad-Aware is one such program.

Security is very sensitive matter for both the IT service providers and users. One should proceed very carefully. As for the IT service providers like software publishers, website owners, e-commerce website owners, e-mails service providers and so on should install SSL certificate for better performance and uninterrupted growth.

For users, well, always look for two symbols “https” and a green padlock in the address bar. Download softwares from the real authors only and stop propagating piracy.

8 awesome tips for freelance programmers

 

A freelance programmer can enjoy a nice career. Not only that, he or she can avoid working at a large corporation where they will have to deal with company politics and an eventual ceiling. Of course, it is not all fun and games as a well-trained and hardworking programmer should follow some basic tips if he or she wants to enjoy success in this arena. With that in mind, here are eight tips for freelance programmers.

1. Constant communication:

 

 

When taking on a project, one should communicate with the business as often as possible. This means, when speaking to the client, one should mention any road blocks or any accomplishments. With an open door policy, the programmer will have an easier time keeping clients happy and informed.

2. Educating:

While most software developers possess a lot of skills and brains, it is wise to attend more computer classes. By continuing the education, a hardworking programmer can learn more and avoid getting left behind by the competition. In fact, this is extremely important as this field is ever-evolving and new coding ideas and techniques come up all the time.

3. Do not sell yourself short:

All-too-often, an independent contractor or business owner will ask for a low wage. When doing this, one will hurt their long-term chances for success. While it is not wise to ask for top dollar, it is beneficial to demand a livable wage. Believe it or not, when dealing with a confident programmer, a company is likely to give in to the financial demands.

4. Home office:

Whether a person works from home or at the office all the time, they should still have a home office. With this, a programmer can complete tasks without interruption from spouses, children or animals. Without a doubt, this is extremely important as a serious programmer will need to concentrate on the task at hand.

5. Have website and online presence: 

Now, more than ever, a company owner or contractor should have a website and online presence. With this, a reliable software developer can reach millions of potential clients. At the same time, while making a website, one should keep it simple, straightforward and easy to understand. With this, a programmer can showcase his or her talent for the world to see.

6. Outsource quality assurance: 

It is not easy for a programmer to check out his or her programs and code. To avoid turning in a bad product, a smart developer should hire a contractor who can check out the code. By taking a few hours to go over everything, a quality assurance analyst can find any issues and report back to the programmer. This is a great idea as one mistake can result in serious problems in the short and long run.

7. Speak up:

Often, a foolish client will want an unrealistic or impractical solution. While the customer is always right, it is still beneficial if a programmer voices his or her concerns. This should not cause a lot of problems as most business owners will willingly give in as they will, usually, trust the programmer. Either way, it is wise to remain assertive when talking about the product.

8. Set schedule:

It is often tempting for a business owner to set a weird schedule or work nights and weekends. While this is okay at first, a serious programmer who wants to succeed should opt to work a typical 9-5 schedule. This allows other business owners to stay in contact and communicate with the programmer. Since most other entrepreneurs love to work 9 to 5, this is a great way to go above and beyond and offer solid customer support.

It is not easy to work as an independent software programmer. With that in mind, with a few basic tips, a developer can take his or her ideas to the next level. Remember, when focused and ready, a programmer will please his or her clients and make a nice living in the process.

Deciphering password from WS_FTP.ini file

WS_FTP is a line of file transfer protocol client software produced by Ipswitch, Inc.for the Windows operating systems. WS_FTP stands for WinSock File Transfer Protocol. The graphical user interface of WS_FTP has two-panes: the left pane is the local computer that the software is installed on and the right pane is the server being connected to. Recent versions of WS_FTP include the ability to customize the panes and to connect to multiple servers at the same time.
The line includes a "Home" version (which lacks security features such as SSH andhttps support), a more powerful "Professional" version (also known as WS_FTP Pro), and an FTP server. WS_FTP Home used to be called WS_FTP LE, which was a Limited Edition version whose license permitted used by educational, government and non-profit home usrs (version 5.x and earlier). With version 6.0, WS_FTP LE's license was revised to allow for educational use only.

An initialization file, or INI file, is a configuration file that contains configuration data (i.e. idiom terms) for Microsoft Windows based applications.
Starting with Windows 95, the INI file format was superseded but not entirely replaced by a registry database in Microsoft operating systems. Recently, XMLbecame a popular choice for encoding configuration, as well as other kinds of data for many applications, but INI format is still in use.
Although made popular by Windows, INI files can be used on any system thanks to their flexibility. They allow a program to store configuration data, which can then be easily parsed and changed.

Use the 14th line of the google hacking query 5 to find an ini file (WS_FTP.ini file) and find the password
The password must be in that way:

PWD=V29BEA5A170EE544D8F2D7CEA802A182BA76A387266A14799AEA53D73B0AE

Password decipher

researcher get $10000 for hacking google server with malicious xml

This feature of Google search engine is vulnerable to XML External Entity (XXE). It is an XML injection that allows an attacker to force a badly configured XML parser to "include" or "load" unwanted functionality that can compromise the security of a web application.

A critical vulnerability has been uncovered in Google that could allow an attacker to access the internal files of Google’s production servers. Sounds ridiculous but has been proven by the security researchers from Detectify.

The vulnerability resides in the Toolbar Button Gallery (as shown). The team of researchers found a loophole after they noticed that Google Toolbar Button Gallery allows users to customize their toolbars with new buttons. So, for the developers, it is easy to create their own buttons by uploading XML files containing metadata for styling and other such properties.

“The root cause of XXE vulnerabilities is naive XML parsers that blindly interpret the DTD of the user supplied XML documents. By doing so, you risk having your parser doing a bunch of nasty things. Some issues include: local file access, SSRF and remote file includes, Denial of Service and possible remote code execution. If you want to know how to patch these issues, check out the OWASP page on how to secure XML parsers in various languages and platforms," the researchers wrote on a blog post.

Using the same, the researchers crafted their own button containing fishy XML entities. By sending it, they gain access to internal files stored in one of Google's production servers and managed to read the “/etc/passwd” and the “/etc/hosts” files from the server.

By exploiting the same vulnerability the researchers said they could have access any other file on their server, or could have gain access to their internal systems through the SSRF exploitation.

The researchers straight away reported the vulnerability to the Google’s security team and rewarded with $10,000 (€7,200) bounty for identifying an XML External Entity (XXE) vulnerability in one of the search engine’s features.

How to Hack/Crack/Recover/Skip an iPhone/iPad/iPod’s Passcode?

Hello Apple lovers, today in this tutorial we are going to show you the simplest way to Hack, or Skip your iPhone’s passcode. Follow us after the break and do as shown to unlock any iPhone, iPad or iPod touch!

How To Hack, Skip an iPhone’s Password

 

If you are one of those “father” or “mother” who are caring so much about everything with their sons, or want to see your girl’s iPhone to be sure of anything in your mind Mr lover, or forget your passcode and looking for any way to restore your missed password/passcode!

The following tutorial guide will show you how simply you can access the iDevice without any risks or harms, just follow the step-by-step guide as shown…

First Method: 

• The Temporary Method ( it will open the contacts app from which you can browse, edit, email any contact)
• Tap the “Emergency call” button on the lock screen
• Then, enter “####”.
• As soon as you enter”####” tap the dial button
• Immediately, press the lock button which is on top of the iPhone
• That’s it

But this way you will only be able to call, edit and email any contact. That’s why it is a temporary method only enables you to make urgent calls or get any contact numbers from the contact list.

Second Method:

The Permanent Method That Always Works
The Permanent solution to the problem is to Restore your iPhone. It will most certainly remove the passcode or password you have forgotten, However it will wipe out all data and everything you have on your iPhone or iPad unless you have it backed up in you Computer. So, if you have decided to go with this option the Just follow these steps:

• Sync it with your computer and iTunes and back up your iPhone. You will be able to backup your data even if your iPhone is stuck at Passcode.
• Put your iPhone into DFU mode.
• (To do this, reboot your iPhone by holding down the power and home buttons simultaneously for about 10 seconds. When you see the Apple logo, let go of the power button but continue holding down the home button. A message will come saying “Connect to iTunes.”

iTunes will detect your iPhone as in recovery mode and will ask you to restore it. Click the Restore button in iTunes and then wait.
Once Done restoring, Sync your iPhone with iTunes to get all your data back. [Via iTechBook] 

My dear reader, don’t forget to like and share this helpful post with your friends and to make sure that you are one of our Facebook fans by hitting here, or followers on Twitter over here and Google Plus for more news.

Android Forensics: How To Bypass The Android Phone Pattern Lock

Introduction

Android is an open source operating system based on the Linux kernel, initially developed by Android Inc., which Google bought in 2005. Initially, Android was developed to support touch screen devices like smartphones. These devices support different types of screen locks, like swipe lock, PIN lock, pattern lock, gesture lock, facial lock, etc.

Swipe lock unlocks the screen just by swiping a defined area on the screen with your fingertips. PIN lock is when you enter a correct pin, the screen will be unlocked. Pattern lock unlocks the screen when the user creates a pattern by joining nine circles on the screen, which is already saved on your system. This article is only based on the pattern locking system and does not cover biometric locking systems available on the phones.

Understanding Android Pattern Locks

Figure 1: Android Pattern lock with numbering

Patterns are nothing but the path traced by the fingers on the nine circles with the number starting from 1 to 9 from top-left corner to the right bottom corner as shown in the figure above. If we select a pattern 1478, the pattern would look as shown in Figure 2.

Figure 2: Pattern for 1478

This pattern is saved with a 20-byte SHA-1 Hash. So the SHA-1 hash for 1478 will be “06CF96F30A7283FF7258FCEF5CF587ED51156C37” which is stored in a file named gesture.key in /data/system folder in Android’s internal memory.

The Catch

The catch to change the pattern is replace this file with a known pattern gesture.key file.

Prerequisite

1. Debugging mode should be enabled.
2. Android adb (Android Debugger Bridge) tool.
3. AVD (Android Virtual Device) Manager Tool.
4. Device USB Cable
5. Device whose password needed to be changed

Methodology

Step 1

Start an AVD (Android Virtual Device), and create a pattern in the AVD. Open a command prompt. Execute the following command to check whether the AVD has been connected to the debugger or not.

1. adb devices

The output of the command should look as shown in Figure 3. If you see the name of your emulator on the screen, then your device is perfectly connected.

Figure 3: Output of adb devices

Step 2

Now pull out the gesture.key file from the AVD. For this execute the command that is mentioned below. This file is located in /data/system.

1. adb pull /data/system/gesture.key gesture.key

The gesture.key file will be pulled to your current working directory. Here the syntax of command is adb pull . Here my current working directory is my home folder. So the gesture.key file will be pulled out in my local file system in my home directory.

The output of the command is as shown n Figure 4.

Figure 4: Pulling out gesture.key file

Step 3

Now connect the other device, whose password is to be changed and close the AVD. For my example I will be using the same AVD. So now my password in my AVD is 1478 according to the pattern cell numbers. Figure 5 illustrates the pattern.

Figure 5: Current pattern of the Device

In next step, it will be shown how to change the pattern of new device to a known pattern from the previous AVD which was 1236. Figure 6 illustrates the new pattern.

Figure 6: The new pattern which is not stored in the AVD

Step 4

Now to change the password with a known pattern, we will push our known pattern file to the new device. The command for pushing a file into an android system is shown below. This file has to be pushed into /data/system of the new device.

adb push gesture.key /data/system/gesture.key

The gesture.key file will be pushed into the Android’s file system replacing the previous file. So now android will be having a new gesture file which contains a known password, and when we use this pattern to unlock the screen, the screen will be unlocked. The syntax for pushing a file into an Android system is adb push .

The output of the command is shown in Figure 7.

Figure 7: Pushing the known pattern file into the android system

Now this changes the pattern of the new device with a known pattern. Figure 8 illustrates the known pattern unlock.

Figure 8: Pattern replaced with a known pattern

Limitations

• The device should be rooted
• The device should have USB debugging mode enabled