search

KnugiHK / WhatsApp-Key-DB-Extractor

Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
Other
122 stars 7 forks source link

Whatsapp Business not Supported (Alternate Solution Available) #1

Closed yapkahfung123 closed 2 months ago

yapkahfung123 commented 2 years ago

--EDIT-- The WhatsApp Business is not vulnerable to the downgrade attack, which rendered this extractor useless against it. For other solution, see https://github.com/KnugiHK/WhatsApp-Key-DB-Extractor/issues/1#issuecomment-2155881641. --EDIT--

HI, i was follow your step to edit the script. The only error i facing rn is this. Please refer my attachment below 🙏

image

yapkahfung123 commented 2 years ago

I've notices that my whatsapp db is store in my This PC\Galaxy A03\Phone\Android\media path. Where can i change the script to target correctly? image

KnugiHK commented 2 years ago

Continues of https://github.com/KnugiHK/Whatsapp-Chat-Exporter/issues/10

KnugiHK commented 2 years ago

I've notices that my whatsapp db is store in my This PC\Galaxy A03\Phone\Android\media path. Where can i change the script to target correctly?

I guess that directory is not for storing the databases? Could you show me the file list inside the directory?

KnugiHK commented 2 years ago

HI, i was follow your step to edit the script. The only error i facing rn is this. Please refer my attachment below

This error is due to the system cannot find the Java executable, hence, no tar file is generated.

However, as I investigate WhatsApp Business further, I found that adb backup may not work in WhatsApp Business. Although android:allowBackup is set to "true", the android:backupAgent is set to "com.whatsapp.registration.backuptoken.BackupTokenAgentHelper". We may need to implement a "BackupAgent" class that has the same class name as above in order to deal with the backup.

So, rooting may be the best luck for now. I will look into it deeper.

yapkahfung123 commented 2 years ago

I've notices that my whatsapp db is store in my This PC\Galaxy A03\Phone\Android\media path. Where can i change the script to target correctly?

I guess that directory is not for storing the databases? Could you show me the file list inside the directory?

Sure. It has 3 folder inside

image image image image

KnugiHK commented 2 years ago

So, rooting may be the best luck for now. I will look into it deeper.

If you are not able to root your device, you may install WhatsApp Business in an Android x86 or emulator with root privileges. Install and restore the backup of your WhatsApp Business. By then, you can extract the data by:

adb pull /data/data/com.whatsapp.w4b

Inspired by WhatsDump.

yapkahfung123 commented 2 years ago

HI, i was follow your step to edit the script. The only error i facing rn is this. Please refer my attachment below

This error is due to the system cannot find the Java executable, hence, no tar file is generated.

However, as I investigate WhatsApp Business further, I found that adb backup may not work in WhatsApp Business. Although android:allowBackup is set to "true", the android:backupAgent is set to "com.whatsapp.registration.backuptoken.BackupTokenAgentHelper". We may need to implement a "BackupAgent" class that has the same class name as above in order to deal with the backup.

So, rooting may be the best luck for now. I will look into it deeper.

You mean that i have to root my device in order to extrace the databases ?

KnugiHK commented 2 years ago

Sure. It has 3 folder inside

Yeah, they are just the crypt14 backup, which can be copy to the computer manually without trouble. However, you will need the key to decrypt those crypt14 files, which is only available in /data/data/com.whatsapp.w4b

KnugiHK commented 2 years ago

HI, i was follow your step to edit the script. The only error i facing rn is this. Please refer my attachment below

This error is due to the system cannot find the Java executable, hence, no tar file is generated. However, as I investigate WhatsApp Business further, I found that adb backup may not work in WhatsApp Business. Although android:allowBackup is set to "true", the android:backupAgent is set to "com.whatsapp.registration.backuptoken.BackupTokenAgentHelper". We may need to implement a "BackupAgent" class that has the same class name as above in order to deal with the backup. So, rooting may be the best luck for now. I will look into it deeper.

You mean that i have to root my device in order to extrace the databases ?

It is optional to extract databases with root as you have crypt14 files in your external storage. But it seems to be essential to extract the encryption key with root. So,

Option 1:
Extract the plaintext database with root.

Option 2:
Extract the encryption key file with root and decrypt the crypt14 files with Whatsapp-Chat-Exporter.

yapkahfung123 commented 2 years ago

data/com.whatsapp.w4b

I looking thru /Andriod/data/com.whatsapp.w4b. There is no key to for decyption.

image

KnugiHK commented 2 years ago

/data/data/com.whatsapp.w4b is different from /Andriod/data/com.whatsapp.w4b.

The full path of /data/data/com.whatsapp.w4b in Android system is /data/data/com.whatsapp.w4b The full path of /Andriod/data/com.whatsapp.w4b in Android system could be (depends on device) /sdcard/Andriod/data/com.whatsapp.w4b

/data/data/com.whatsapp.w4b can only be accessed with root if adb backup is not working.

yapkahfung123 commented 2 years ago

I can't see any data folder in my internal storage. Looks like want to root the device

image

KnugiHK commented 2 years ago

Yup, you may need to root the device.

stevo-king commented 11 months ago

So, rooting may be the best luck for now. I will look into it deeper.

If you are not able to root your device, you may install WhatsApp Business in an Android x86 or emulator with root privileges. Install and restore the backup of your WhatsApp Business. By then, you can extract the data by:

adb pull /data/data/com.whatsapp.w4b

Inspired by WhatsDump.

Hi KnugiHK, may i know if the whatsapp business is currently installed on an non-rooted android. Can I move the key to a rooted device? My sim card has lost, so I cannot login my whatsapp business account anymore....

KnugiHK commented 11 months ago

So, rooting may be the best luck for now. I will look into it deeper.

If you are not able to root your device, you may install WhatsApp Business in an Android x86 or emulator with root privileges. Install and restore the backup of your WhatsApp Business. By then, you can extract the data by:

adb pull /data/data/com.whatsapp.w4b

Inspired by WhatsDump.

Hi KnugiHK, may i know if the whatsapp business is currently installed on an non-rooted android. Can I move the key to a rooted device? My sim card has lost, so I cannot login my whatsapp business account anymore....

Do you mean can you move files in WhatsApp's internal storage to a rooted device from a non-rooted Android?

stevo-king commented 11 months ago

So, rooting may be the best luck for now. I will look into it deeper.

If you are not able to root your device, you may install WhatsApp Business in an Android x86 or emulator with root privileges. Install and restore the backup of your WhatsApp Business. By then, you can extract the data by:

adb pull /data/data/com.whatsapp.w4b

Inspired by WhatsDump.

Hi KnugiHK, may i know if the whatsapp business is currently installed on an non-rooted android. Can I move the key to a rooted device? My sim card has lost, so I cannot login my whatsapp business account anymore....

Do you mean can you move files in WhatsApp's internal storage to a rooted device from a non-rooted Android?

yesyes. My sim card for my whatsapp business is loss. So I have loss my whatsapp business account. The sim card user has validated the whatsapp number and my whatsapp business account is logged out already.

But I just want to get back my whatsapp business history. But my phone is not rooted Samsung device. I checked online, seems root it now will need a factory reset of my device and deleted my whatsapp business file in my non-rooted android. But as my file is unrooted now, seems i cant extract my key file....

KnugiHK commented 5 months ago

This may worth to give a try for WhatsApp Business: https://tinyhack.com/2024/06/07/extracting-whatsapp-database-or-any-app-data-from-android-12-13-using-cve-2024-0044/

Credit goes to @yohanes

stevo-king commented 5 months ago

it works!!!! i can finally recover my chat history!!! thanks so much @KnugiHK and @yohanes