search

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
893 stars 214 forks source link

Support decrypting WhatsApp databases if encryption key is available #1658

Open lfcnassif opened 1 year ago

lfcnassif commented 1 year ago

Currently just decrypted databases are supported. It would be nice to decrypt DBs automatically if the key is available. There are different encryption schemes that may be found (crypt12, crypt14...)

gfd2020 commented 3 weeks ago

Maybe we can use this tool below. It already decrypts .crypt12, .crypt14 and .crypt15. This way, the next step would be to identify the encrypted databases and the possible keys...

https://github.com/ElDavoo/wa-crypt-tools