search

B16f00t / whapa

WhatsApp Parser Toolset v1.59
1.11k stars 261 forks source link

Requesting Google access... Failed #165

Closed joeleskratos closed 2 years ago

joeleskratos commented 2 years ago

yeah this I don't have 2FA on my account and I have already done the most obvious step This https://accounts.google.com/b/0/DisplayUnlockCaptcha To my account but still, I have the same problem since yesterday never happen this before 😪

Maro8311 commented 2 years ago

i don't know if it should be closed cuz now people cant use it without a phone verification its not like the older one :c Google sucks

Yes, but Exwa from Elcomsoft (no advertising, I get no ad fees for that or something) does it without phone verification, but I cannot perform a MITM-Attack with Frida Server on this application due to certificate pinning. If anyone knows how to use Frida server on Windows applications help is appreciated! But little caveat of Exwa: it cannot download the PTT*.opus recordings, these files are 0 Bytes in size, dont know why, but the rest works. Try the trial version and test yourself, you can use Everything from Voidtools to see in what directory the files are downloaded. Because the viewing capability in the program is limited,, cause its a trial. But you can view everything directly in the filesystem.

B16f00t commented 2 years ago

For now this is the only method I have been able to get it to work, if a new method is obtained, like the previous one it will be improved. I don't make money with this, whoever doesn't like it should use Exwa from Elcomsoft,

Maro8311 commented 2 years ago

For now this is the only method I have been able to get it to work, if a new method is obtained, like the previous one it will be improved. I don't make money with this, whoever doesn't like it should use Exwa from Elcomsoft,

I think we all appreciate your work here. Thanks a a lot of for your update and sharing. I think no one can and will DEMAND a solution from you. I would like to collaborate on a solution without phone verification, thats why I brought Exwa into play (not to critize your solution), to show it must be possible. But exwa is not open source and not scriptable and as such at least not my desired solution. I was stuck on listening to Exwa. I will try if listening to the native WhatsApp on Android is easier (and break the certificate pinning). But I do not think it is easier! If someone has information in these issues, plz share!

joeleskratos commented 2 years ago

For now this is the only method I have been able to get it to work, if a new method is obtained, like the previous one it will be improved. I don't make money with this, whoever doesn't like it should use Exwa from Elcomsoft, yeah I really appreciate ur work all of us do and I'm no one tell you if it's wrong or not but yeah time will tell if u can see how Exwa is making it to work without phone verification 😥

B16f00t commented 2 years ago

It is not that difficult, for example, for WhatsApp on Android I use a virtual machine with android 6 and I use the canary application which install a certificate to listen to the traffic. Yesterday I was testing exwa and it didn't work for me, it displayed me a connection failure to the server. If I know you can find another method, it is welcome, but for now it is what it is

B16f00t commented 2 years ago

A new version is available where no browser is needed.

joeleskratos commented 2 years ago

A new version is available where no browser is needed.

and the phone verification?

Maro8311 commented 2 years ago

A new version is available where no browser is needed.

and the phone verification?

At least on my first try, phone veri was gone!

Maro8311 commented 2 years ago

A new version is available where no browser is needed.

Thx a lot @B16f00t