search

B16f00t / whapa

WhatsApp Parser Toolset v1.59
1.11k stars 261 forks source link

Carving of whatsapp key #117

Closed leosol closed 3 years ago

leosol commented 3 years ago

Guys, you have a very nice tool here. Would you be interested in something that could help find "lost" keys (carved ones)? Take a look if you find this usefull: https://github.com/leosol/whatsapp-key-carver I could work on a PR for this...

B16f00t commented 3 years ago

It's interesting, have you ever taken a key that could be used to decrypt a database?

leosol commented 3 years ago

I've being using this for some time... It is most usefull you can't retrieve the key (lost phone number, for example). For this to work, it's necessary to have a full dump of emmc and it must be unencrypted. It's of no use in devices with File Based Encryption, unfortunately.

B16f00t commented 3 years ago

I understand that if you have an image with ufed you can navigate the directory tree and get the key of the whatsapp path. Another problem is that by default the backups are mostly encrypted. but I see the project interesting to incorporate within the suite