sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
884 stars 209 forks source link

Fix jump quoted edited messages on whatsapp, add new message types, fix quoted status and quoted private messages #2246

Open gfd2020 opened 6 days ago

gfd2020 commented 6 days ago

This PR fix Issue #2245 on Android New Databases.

Fix quoted status messages on Android New and IPhone.

Adds 2 new action types for Android:

*63 - Security code notifications are no longer available for this chat.

*142 - This group has over 256 members so now only admins can edit the groups settings.

*69 - adds a subtype from table message_system_business_state

*Message type 15 and status equals 13 are deleted messages.

I haven't tested it on iPhone databases. @wladimirleite , could you please help see this specific case on the iPhone?

@lfcnassif , I believe it would be good to do that batch of regression tests...

gfd2020 commented 6 days ago

I think the edit timestamp information is not parsed on the iPhone, right? In the iPhone databases that I have, I can't find any quote with editing...

wladimirleite commented 6 days ago

I think the edit timestamp information is not parsed on the iPhone, right?

Right. I couldn't find any edit messages in the iPhones I was working on when implementing that feature, neither I have an iPhone that I can use to test.

gfd2020 commented 4 days ago

@wladimirleite and @lfcnassif , I found 2 new action_types (android) that are not mapped, can I add them to this same PR?

gfd2020 commented 3 days ago

I also implemented quoted status identification. I'm also seeing if I can implement quoted in particular in groups ...

I can´t find any quoted edited messagens on iphone to test 😥

gfd2020 commented 2 days ago

Hi @lfcnassif and @wladimirleite .

I didn't know there were other types of citations (status and private). So these new types were implemented ( Android and Iphone):

"Quoted Status" image

"Message quoted privately" image

If user clicks on the quoted message: image

"Message quoted privately not found" image